LuxorCollection_Setup[.]exe

resource	yara_rule
static1/unpack001/fmod.dll	acprotect

resource	yara_rule
static1/unpack001/fmod.dll	upx

resource
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/Luxor AR.exe
unpack001/Luxor.exe
unpack001/core.dll
unpack001/crash.dll
unpack001/dsetup.dll
unpack001/file.dll
unpack001/fmod.dll
unpack001/gfx2d.dll
unpack001/gfx2d_dd7.dll
unpack001/gfx2d_dx8.dll
unpack001/gfx2d_ogl.dll
unpack001/imglib.dll
unpack001/jpeg.dll
unpack001/logger.dll
unpack001/net.dll
unpack001/snd3d.dll
unpack001/snd3d_fmod.dll
unpack001/ui2.dll

resource
LuxorCollection_Setup.exe

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

LuxorCollection_Setup.exe

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 9395ca35b93062b1dbf32eb94adc4fa8ccd1bbad8f63aad36f9f2073e39d2d10
MD5 9dd4c9a955872c6b80eeeeb5930e656b
SHA1 2e6ee847bfaaa7d2162882878e2b47e0095c3c57
SHA512 92554363540d79f42ae5f32e6d712534dc772c9f9c13676597a27cdc1a9471d0ac5f3ac3f94af8ff5cb4f285a6bfde4de0286edaa5353fa21733ea409184a990
SSDEEP 786432:O5l6pBJFhEbCYFvH6XneM6Lj3HqHVgbuNX9Q4/W72EoA+5JxWoCdNXUkaJenLuvs:gUhEbHM8+HVgbB4p5CdNXUkdfx
TLSH
T195B733533E34414FE9577838160ED2B2AF32BD68862B1E7A5960BA63F0D17E0D46D7C8
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

d3:49:61:1c:31:69:1e:83:d7:35:78:91:56:12:7d:9c:66:16:2d:f2

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=MumboJumbo,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=MumboJumbo,L=Dallas,ST=Texas,C=US

Chains

Sep 25, 2026

CN=MumboJumbo,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=MumboJumbo,L=Dallas,ST=Texas,C=US

Minor OS version

0

Major OS version

4

Entry point

12478

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/InstallOptions.dll

IMPHASH b1cd0d78f652ce5fc63f0879371af012
SHA256 17e2f205af12d5a86638dc83c95fc69199c41af2fa6daeb1e91ec330f68c5372
MD5 f62d03fcb1473110e920a9bb2c701006
SHA1 c48444ef2daa60dcdf91f1645cd4ecd8e66545f7
SHA512 701d531d405d08054d53298141d5bbd56e74df7b22bcea5f9f0e5c4407421ea0ca9617aa84e740dc1dc44e6d14e58852c1ca2087213cc2319f2da44eaed0bc05
SSDEEP 192:g6JaVGQ+xI5EeuyvMmGpeWH2J5xprN+AxTxK72dwF7dBdcQOz:g6JaVh4I5rpPbTx+BdhO
TLSH
T1F1523951378888F3E792053EB45237079F9D5226B8929ED1CA331FC62D2B19E2FB1302
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10795

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetCurrentDirectoryA GetCurrentDirectoryA MultiByteToWideChar GetPrivateProfileIntA GlobalLock GetModuleHandleA lstrcmpiA GetPrivateProfileStringA lstrcatA lstrcpynA WritePrivateProfileStringA lstrlenA lstrcpyA GlobalFree GlobalUnlock GlobalAlloc

user32

MapWindowPoints GetDlgCtrlID CloseClipboard GetClipboardData OpenClipboard PtInRect SetWindowRgn LoadIconA LoadImageA SetWindowLongA CreateWindowExA MapDialogRect SetWindowPos GetWindowRect CreateDialogParamA ShowWindow EnableMenuItem GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA LoadCursorA SetCursor DrawTextA GetWindowLongA DrawFocusRect CallWindowProcA PostMessageA MessageBoxA CharNextA wsprintfA GetWindowTextA SetWindowTextA SendMessageA GetClientRect

gdi32

SetTextColor CreateCompatibleDC GetObjectA GetDIBits CreateRectRgn CombineRgn DeleteObject SelectObject

shell32

SHBrowseForFolderA SHGetDesktopFolder SHGetPathFromIDListA ShellExecuteA

comdlg32

GetOpenFileNameA GetSaveFileNameA CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/System.dll

IMPHASH 4ec328f99bdd944fc98d8a5cf11f7a62
SHA256 e67277ecc4f6c7beb3c7e586ce508677269db056c7541eacfecf6c719f559da6
MD5 0bbcbaee7b703ebd55cd8658a0e8dcd3
SHA1 6ed448b8b67cea36eb45bfbc67fed9a6da9623e4
SHA512 604c524bd00313f6411cc9878d5c9a1db77588049feeb5bb02c971df44f8becbd18d251cc20e551b878173eb2a78be61f31352769597c6334cffc0bc2326b008
SSDEEP 192:WO6dJA/ruAFEiUdWWE6hE5RYUdJfbub1azgMO:TKAFERdlxhGRYUzqZaz
TLSH
T16B226D5547A041F3DD60823C08973D276BA837148EA54EC3CF9314429E296A6BCBC336
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10425

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
TLSH
T1D3D0C9C9501A802944208642A97A2FA263E03E210B1725FAF5724C87EB4CDE79C9D682
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/modern-header.bmp

SHA256 a37443c1066b21cf81c175a47280c50b5c79841d0126bbb7c722a6b9b37defce
MD5 f8835e9df08fc6dcd9cf2bdd99687115
SHA1 dafad0e3343a07c3d149587f4e995c12a6a655d5
SHA512 efbef02667db69356756abbf72335ccfca438780bf5a8eb013baf73bccfb1c7554d0df21f1159de8f5652c02009dde34902f0edb2f8b922c7df2de490ababc91
SSDEEP 192:efLg+iXG1Av9LzCNF4hCvn6CfxWUYspSkpjlyLM8S:efk+iXgAvBcF4hqxW2plh2M7
TLSH
T133C219D26541D06AC87A22E4FDB9D0ACB5772D5CBC331A47FE5772CE7B326992808600
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$PLUGINSDIR/modern-wizard.bmp

SHA256 2009dae1528c7c4ab0d40b57df7653df1f4a2fe475592f41283318d51496f7fb
MD5 a8ca066368abf2ecd6d41c0f71c17610
SHA1 ba0891129c91ce83d4259f94a9aaaf43527d7baa
SHA512 37c18c87bbb7008a71ac4f717da790cc420826e6f6121ba93d923a1060e57429cf73a20b585f2dc2d8b50b62d067db72e7a8d534f6a1768bfa4039144acabd87
SSDEEP 3072:UQnOYifVp4FxRkTbLqlF8U5ofjP35T1C7Ou/E5In93IxUQarsXN8uL:LnZiE8XZTk5E22iQQs9X
TLSH
T106E3F10CC89608A4E2EC5A3464E5998E6BA43F76EDFCB6BE5F3878D016F36DD3015049
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

EULA.txt

SHA256 f70a05539a667328872188f5331cd6dd6c430f65220bca02b9994e3378ad8d0d
MD5 ef04d93d318627a80db7304dd1fbe30d
SHA1 93f82e2e3aecbeb6cc93e9092b714a36e69c0008
SHA512 b2bb1ff2dc03071632d83385a2bb2a097a963c59cafc62ce96b47fed5c9732c8361bc8e6f6d5ea8e027229bfe7abf51b4b2e59e07a9f06f03cbfdd1c09f25b5c
SSDEEP 192:qWxThKpOMi4tTJizeqMn19TL3nxr3tprkKbyAKQWC0FB+RoUSIWf:qcOVszQ19TDxDPkdUWl0oUnw
TLSH
T10B22C86BB7C613A206C213A06E066DC5F328D478722E89543069905E3366FB783FFE65
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Luxor AR.exe

IMPHASH 97b43dd62735d7f12aeb72bce1bfe018
SHA256 33eece90c2012ef71ff84e61670b742fc07eaa0cb2a1edfeb0abda6024c93c1f
MD5 c668cb3ae12e7b1ec4cbbf016d6f7c7f
SHA1 fd01f6f46cc128f0f435d8210151819c119f8cce
SHA512 f44d413e401859fdf9fc0307ffcf666b7aaccb7ed711bddb1a104ef32cfbed23708a1d553819a5f5be586aef67370272afbffbdb01231fc81afe01c826e19e3f
SSDEEP 3072:zaeUNiIRXRc1jNTvmsQVKb+V2cqBYZ+oFAcF/rWp7De59TY01qX2Mz9:Oe1smcq1/cFOvelqX2M
TLSH
T1AB147C3064F901F1D64B227414ADEBB1BE78EF391B294687B764FE473D33260A426276
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

119658

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

SetWindowsHookExA CallNextHookEx SetForegroundWindow GetDesktopWindow GetAsyncKeyState DefWindowProcA RegisterWindowMessageA UnhookWindowsHookEx MessageBoxA

core

?free@MemoryMgr@@QAEHHPAX@Z ?g_MemoryPtr@@3PAVMemoryMgr@@A ?GetString@Parser@@QAEPADXZ ?GetWindowWidth@Platform@@YAHXZ ?ParamEqualsInt32_2@Parser@@QAE_NPBD0PAH1@Z ?GetInt@Parser@@QAE_NPAH@Z ?GetFloat2@Parser@@QAE_NPAM0@Z ?GetEqualsToken@Parser@@QAE_NXZ ?MessageBoxA@Platform@@YAXPBD0ZZ ??0CommandLine@@QAE@XZ ?initialize@MemoryMgr@@QAEHXZ ??1CommandLine@@UAE@XZ ?addCommand@CommandLine@@QAEXPBDHH@Z ?init@CommandLine@@QAEXHPAPAD@Z ?SystemCheck@Platform@@YA_NXZ ?SetMinimized@Platform@@YAX_N@Z ?SetActive@Platform@@YAX_N@Z ?GetActive@Platform@@YA_NXZ ?RawKeyToLocalKey@Platform@@YAHH@Z ?GetAppFilePrefix@Platform@@YAPBDXZ ?SetApp@Platform@@YAXPAUHINSTANCE__@@@Z ?GetCPUInfo@@YAHXZ ?BeginTimePeriod@Platform@@YAXXZ ?EndTimePeriod@Platform@@YAXXZ ?touchMemory@MemoryMgr@@QAEXXZ ?checkMemory@MemoryMgr@@QAEHHPAI_N@Z ??0MemoryMgr@@QAE@XZ ?defineBank@MemoryMgr@@QAEHW4e_MemoryLocation@@W4e_MemoryBankType@@PBDI@Z ??1MemoryMgr@@UAE@XZ ?CreateDir@Platform@@YAHPBD@Z ?s_setLocalePath@StringTable@@SAXPBD@Z ?setLanguage@StringTable@@QAE_NPBD@Z ?SetAppState@Platform@@YAXW4e_AppState@@@Z ?Load3dSoundAPI@@YA_NPBD@Z ?sndCreateSnd3dSubsystem@@3P6GPAVsnd3dSubsystem@@XZA ?LoadGraphicsAPI@@YA_NPBD@Z ?gfxCreateGfxSubsystem@@3P6GPAVgfxSubsystem@@XZA ?GetPlatformOS@Platform@@YA?AW4e_OperatingSystem@@XZ ?LoadIconA@Platform@@YAPAUHICON__@@H@Z ?GetApp@Platform@@YAPAUHINSTANCE__@@XZ ?InitWindow@Platform@@YAPAUHWND__@@PAUHINSTANCE__@@PAU2@PBDPAUHICON__@@3HHHH_N4P6GJ1IIJ@Z@Z ?SetWindow@Platform@@YAXPAUHWND__@@@Z ?MessagePump@Platform@@YAHXZ ?GetWindow@Platform@@YAPAUHWND__@@XZ ?UnloadGraphicsAPI@@YA_NXZ ?Unload3dSoundAPI@@YA_NXZ ??1StringTable@@UAE@XZ ??0StringTable@@QAE@XZ ?mt_srand@@YAXI@Z ?GetTime@Platform@@YAIXZ ?mt_rand@@YAIXZ ?ParseLine@Parser@@QAE_NXZ ??0Parser@@QAE@PAD@Z ?alloc@MemoryMgr@@QAEPAXHIPBDI@Z ??1Parser@@UAE@XZ ?ParamEqualsBoolean@Parser@@QAE_NPBD0PA_N@Z ?ParamEqualsFloat32_2@Parser@@QAE_NPBD0PAM1@Z ?ParamEqualsFloat32@Parser@@QAE_NPBD0PAM@Z ?ParamEqualsInt32@Parser@@QAE_NPBD0PAH@Z ?ParamEqualsString@Parser@@QAE_NPBD0PADI@Z ?GetToken@Parser@@QAEPADPAD@Z ?GetAppDataDir@Platform@@YAPBDPBD@Z ?cmdExists@CommandLine@@QAE_NPBD@Z ?GetCommandLineA@Platform@@YAPAVCommandLine@@XZ ?SpawnWebBrowser@Platform@@YAXPBD@Z ?getArgs@CommandLine@@QAE_NPBDPAHPAPAPAD@Z ?Sleep@Platform@@YAXI@Z ?GetAppVersion@Platform@@YAPBDXZ ?ReportCPUInfo@@YAXXZ ?GetAppTitle@Platform@@YAPBDXZ ?CreateAppFilename@Platform@@YAPBDPBD0@Z ?SetCommandLine@Platform@@YAXPAVCommandLine@@@Z

file

?initialize@File@@YA_N_N@Z ?loadArchive@File@@YAHPBD@Z ?registerThread@File@@YAXXZ ?unregisterThread@File@@YAXXZ ?seek@File@@YAHPAU_MjzFileType_s@@HH@Z ?open@File@@YAPAU_MjzFileType_s@@PBD0@Z ?getLength@File@@YAHPAU_MjzFileType_s@@@Z ?read@File@@YAIPAXIIPAU_MjzFileType_s@@@Z ?close@File@@YAHPAU_MjzFileType_s@@@Z ?write@File@@YAIPBXIIPAU_MjzFileType_s@@@Z ?setLocalePath@File@@YAXPBD@Z

ui2

?getType@uiVisualWidget@@UAEPBDXZ ?isType@uiVisualWidget@@UAE_NPBD@Z ?_update@uiVisualWidget@@MAEXHH@Z ?getType@uiRadioGroup@@UAEPBDXZ ?isType@uiRadioGroup@@UAE_NPBD@Z ?_render@uiProgressBar@@MAEXHH@Z ?_update@uiProgressBar@@MAEXHH@Z ?_parseParams@uiProgressBar@@MAEXPAVParser@@PAD@Z ??1uiProgressBar@@UAE@XZ ??0uiProgressBar@@QAE@XZ ?_inputEvent@uiVisualWidget@@MAE_NW4e_uiEvent@@HHH_N1@Z ?_deactivate@uiVisualWidget@@MAEXXZ ?setValue@uiProgressBar@@UAEXH_N@Z ?setValue@uiRadioGroup@@QAEXH@Z ?_parseParams@uiRadioGroup@@MAEXPAVParser@@PAD@Z ??1uiRadioGroup@@UAE@XZ ??0uiRadioGroup@@QAE@XZ ?_setValue@uiRadioGroup@@MAEXPBVuiWidget@@H@Z ??_7uiNonVisualWidget@@6B@ ?_render@uiVisualWidget@@MAEXHH@Z ?detachFromParent@uiWidget@@QAEXXZ ?_releaseSprite@uiWidget@@KAXH@Z ??0uiVisualWidget@@QAE@XZ ??1uiVisualWidget@@UAE@XZ ?testBounds@uiVisualWidget@@UAE_NHH@Z ?_inputEvent@uiRadioButton@@MAE_NW4e_uiEvent@@HHH_N1@Z ??1uiRadioButton@@UAE@XZ ??0uiRadioButton@@QAE@XZ ?_parseParams@uiRadioButton@@MAEXPAVParser@@PAD@Z ?_parseSingleFlag@uiButton@@MAEXPBD@Z ?testBounds@uiButton@@UAE_NHH@Z ?_render@uiRadioButton@@MAEXHH@Z ?_update@uiButton@@MAEXHH@Z ?_activate@uiVisualWidget@@MAEXXZ ?_deactivate@uiButton@@MAEXXZ ?_loseFocus@uiButton@@MAEXXZ ?setAlpha@uiVisualWidget@@UAEXEII_N@Z ?releaseSprite@uiVisualWidget@@UAEXXZ ?setSprite@uiVisualWidget@@UAE_NPBDHH_N@Z ?setAnim@uiVisualWidget@@UAEXH@Z ?setFrame@uiVisualWidget@@UAEXH@Z ?getFrame@uiVisualWidget@@UAEHXZ ?setWidgetStates@uiWidget@@QAEX_N000@Z ?g_ui@@3PAVuiSubsystem@@A ?getWidget@uiWidget@@QAEPAV1@PBDH@Z ?getSpriteId@uiVisualWidget@@UAEHXZ ?getAlpha@uiVisualWidget@@UAEEXZ ?_parseHotkey@uiButton@@MAEXPBD@Z ?_getButtonAnim@uiButton@@MAEHXZ ?_resetHover@uiButton@@MAEX_N@Z ?s_fDeltaTime@uiWidget@@2MA ?isType@uiWidget@@UAE_NPBD@Z ??1uiWidget@@UAE@XZ ?_inputEvent@uiWidget@@MAE_NW4e_uiEvent@@HHH_N1@Z ?s_getDepthValue@uiWidget@@SAHPBD@Z ??1uiTextWidget@@UAE@XZ ??1uiNonVisualWidget@@UAE@XZ ??0uiWidget@@QAE@XZ ?_getDepthValue@uiWidget@@IAEHPBD@Z ??0uiTextWidget@@QAE@XZ ?applyScriptlet@uiWidget@@UAEXPBD@Z ?_parseBoolean@uiWidget@@MAE_NPAVParser@@@Z ?_parseParams@uiTextWidget@@MAEXPAVParser@@PAD@Z ?_parseFlags@uiWidget@@MAEXPAVParser@@@Z ?_parseSingleFlag@uiWidget@@MAEXPBD@Z ?update@uiWidget@@UAEXHH@Z ?render@uiWidget@@UAEXHH@Z ?inputEvent@uiWidget@@UAE_NW4e_uiEvent@@HHH_N1@Z ?initialize@uiWidget@@UAEXXZ ?getType@uiTextWidget@@UAEPBDXZ ?isType@uiTextWidget@@UAE_NPBD@Z ?testBounds@uiWidget@@UAE_NHH@Z ?setVisible@uiWidget@@UAEX_N0@Z ?setInputFocus@uiWidget@@UAEX_N0@Z ?setActive@uiWidget@@UBE_NXZ ?setActive@uiWidget@@UAEX_N0@Z ?overrideVisible@uiWidget@@UAEX_N@Z ?overrideInputFocus@uiWidget@@UAEX_N@Z ?overrideActive@uiWidget@@UAEX_N@Z ?getVisible@uiWidget@@UBE_NXZ ?getInputFocus@uiWidget@@UBE_NXZ ?getOverrideVisible@uiWidget@@UBE_NXZ ?getOverrideInputFocus@uiWidget@@UBE_NXZ ?getOverrideActive@uiWidget@@UBE_NXZ ?getWidth@uiTextWidget@@MBEHXZ ?getHeight@uiTextWidget@@MBEHXZ ?setWidth@uiWidget@@UAEXH@Z ?setHeight@uiWidget@@UAEXH@Z ?trace@uiWidget@@UAEPAU_uiTrace_s@@HHHPBD@Z ?_playWithPan@uiWidget@@UAEPAVsnd3dHandle@@PBDIMH@Z ?_initialize@uiWidget@@MAEXXZ ?_render@uiTextWidget@@MAEXHH@Z ?_update@uiTextWidget@@MAEXHH@Z ?_inputEvent@uiTextWidget@@MAE_NW4e_uiEvent@@HHH_N1@Z ?_trace@uiWidget@@MAEPAU_uiTrace_s@@HHHPBD@Z ?_showWidget@uiWidget@@MAEXXZ ?_hideWidget@uiWidget@@MAEXXZ ?_activate@uiWidget@@MAEXXZ ?_deactivate@uiWidget@@MAEXXZ ?_gainFocus@uiWidget@@MAEXXZ ?_loseFocus@uiWidget@@MAEXXZ ?setAlpha@uiTextWidget@@UAEXEII_N@Z ?setFont@uiTextWidget@@UAE_NH@Z ?setFont@uiTextWidget@@UAE_NPBD@Z ?setJustify@uiTextWidget@@UAEXI@Z ?_print@uiTextWidget@@MAEXHPBI@Z ?_lerpToTargetAlpha@uiTextWidget@@MAEXXZ ?_parseParams@uiWidget@@MAEXPAVParser@@PAD@Z ?getType@uiNonVisualWidget@@UAEPBDXZ ?isType@uiNonVisualWidget@@UAE_NPBD@Z ?getWidth@uiWidget@@UBEHXZ ?getHeight@uiWidget@@UBEHXZ ?_render@uiNonVisualWidget@@MAEXHH@Z ?_update@uiNonVisualWidget@@MAEXHH@Z ?_inputEvent@uiNonVisualWidget@@MAE_NW4e_uiEvent@@HHH_N1@Z ?setAlpha@uiWidget@@UAEXEII_N@Z ?registerProgCb@uiWidget@@SAXP6AXPAV1@PAXW4e_uiProgressEvent@@@Z1@Z ?gfxStatistics@uiSubsystem@@QAEX_NPBD@Z ?setTopLevelWidget@uiSubsystem@@QAEXPAVuiWidget@@@Z ?assignCallbacks@uiWidget@@QAEXPAU_WidgetMap_s@@PAX@Z ?setValue@uiSliderButton@@QAEXM@Z ?getValue@uiSliderButton@@QBEMXZ ?step@uiProgressBar@@QAEXXZ ?getTextRect@uiTextWidget@@QBEXPAU_uiRect_s@@@Z ?reset@uiParticleSystem@@QAEXXZ ?setRange@uiProgressBar@@QAEXHH@Z ?setInputFocusWidget@uiSubsystem@@QAEXPAVuiWidget@@@Z ?stop@uiParticleSystem@@QAEXXZ ?initialize@uiSubsystem@@QAEHPAVPreferences@@@Z ??0uiSubsystem@@QAE@XZ ??1uiSubsystem@@UAE@XZ ?shutdown@uiSubsystem@@QAEHXZ ?forceTerminate@uiSubsystem@@QAEXXZ ?render@uiSubsystem@@QAEHI@Z ?defineDepth@uiWidget@@SAXPBDI@Z ?inputEvent@uiSubsystem@@QAEXW4e_uiEvent@@HHH@Z ?topDialog@uiSubsystem@@QAEPAVuiDialog@@XZ ?isDialogPushed@uiSubsystem@@QAE_NPAVuiDialog@@@Z ?pushDialog@uiSubsystem@@QAEXPAVuiDialog@@_N@Z ?topDialogIsIdle@uiSubsystem@@QAE_NPAVuiDialog@@@Z ?disable@uiButton@@QAEXXZ ?getText@uiTextWidget@@QAEPBIXZ ?getValue@uiRadioGroup@@QBEHXZ ?reportDialogStack@uiSubsystem@@QAEXXZ ?popDialog@uiSubsystem@@QAEXPAVuiDialog@@_N@Z ?s_registerWidget@uiSubsystem@@SAXPBDP6APAVuiWidget@@XZ@Z ?s_dynamicLoading@uiWidget@@2_NA ?print@uiTextWidget@@QAAXHPBDZZ ?loadUI@uiSubsystem@@QAEPAVuiWidget@@PBD@Z ?addChild@uiWidget@@QAEXPAV1@_N@Z ?_parseParams@uiVisualWidget@@MAEXPAVParser@@PAD@Z

snd3d

?initialize@snd3dSubsystem@@QAEHPAVPreferences@@PAUHWND__@@_N@Z ?setCoopLevel@snd3dSubsystem@@QAEXPAUHWND__@@_N@Z ?shutdown@snd3dSubsystem@@QAEHXZ ?update@snd3dSubsystem@@QAEXM@Z ?loadSoundLibrary@snd3dSubsystem@@QAEHPBD@Z ?setMute@snd3dSubsystem@@QAEXW4e_snd3dSoundTypes@@_N@Z ?getMasterVolume@snd3dSubsystem@@QAEMW4e_snd3dSoundTypes@@@Z ?setMasterVolume@snd3dSubsystem@@QAEXW4e_snd3dSoundTypes@@M@Z ?suspend@snd3dSubsystem@@QAEX_N@Z ?setFrequencyScale@snd3dHandle@@QAEXM@Z ?stopPlaylist@snd3dSubsystem@@QAEX_N@Z ?startPlaylist@snd3dSubsystem@@QAEXPBD0_N@Z ?stop@snd3dHandle@@QAEXXZ ?g_snd3d@@3PAVsnd3dSubsystem@@A ?playSound@snd3dSubsystem@@QAEPAVsnd3dHandle@@W4e_snd3dSoundTypes@@PBD_N2@Z ?setLoop@snd3dHandle@@QAEX_N@Z

gfx2d

?moveWindow@gfxSubsystem@@QAEXXZ ?displayChanged@gfxSubsystem@@QAEXPAUHWND__@@HHH@Z ?suspendRenderer@gfxSubsystem@@QAEX_N@Z ?defineDepthNode@gfxSubsystem@@QAEXPBDI@Z ?update@gfxSubsystem@@QAEHI@Z ?getSpriteFrameCount@gfxSubsystem@@QBEHHH@Z ?createParticleSystem@gfxSubsystem@@QAEHPBD@Z ?registerThread@gfxSubsystem@@QAEXPBD@Z ?unregisterThread@gfxSubsystem@@QAEXPBD@Z ?line@gfxSubsystem@@QAEXHHHHHMQBE@Z ?createSprite@gfxSubsystem@@QAEHPBD@Z ?getSpriteHeight@gfxSubsystem@@QBEHH@Z ?getSpriteWidth@gfxSubsystem@@QBEHH@Z ?g_gfx@@3PAVgfxSubsystem@@A ?createParticleSystemInstance@gfxSubsystem@@QAEHPBDHP6AXPAXW4e_ParticleEvents@@PAVgfxParticleSystemInstance@@H@Z1@Z ?psemit@gfxSubsystem@@QAEXHHM@Z ?blt@gfxSubsystem@@QAEXHHHHHHE@Z ?particleSystemInstanceIsDead@gfxSubsystem@@QAE_NH@Z ?particleSystemInstanceStopEmitters@gfxSubsystem@@QAEXH@Z ?blt@gfxSubsystem@@QAEXHHHHHHHHHHE@Z ?g_whiteColor@@3PAEA ?bltx_f@gfxSubsystem@@QAEXHHHMMHHQAEEM_NM1@Z ?isHardwareAccelerated@gfxSubsystem@@QBE_NXZ ?releaseParticleSystem@gfxSubsystem@@QAEXPBD@Z ?createFont@gfxSubsystem@@QAEHPBD@Z ?releaseParticleSystemInstance@gfxSubsystem@@QAEXH@Z ?updateParticleSystem@gfxSubsystem@@QAEXHHHM@Z

logger

?log@udLogger@@SAXHPBDZZ ?registerClient@udLogger@@SAHPBD@Z ?terminate@udLogger@@SAXXZ ?isVisible@udLogger@@SA_NXZ ?start@udLogger@@SAXPBD@Z ?ReportLastError@@YAXXZ ?showWindow@udLogger@@SAX_N@Z

msvcrt

sprintf _purecall _CIacos strncpy sscanf _beginthreadex atoi __CxxFrameHandler _snprintf _stricmp _controlfp _onexit __dllonexit _except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit __p___argv __p___argc _wcslwr fopen fclose _ftol

kernel32

WaitForSingleObject ReleaseMutex Sleep CreateMutexA WritePrivateProfileStringA GetPrivateProfileIntA GetPrivateProfileStringA GetVersionExA GetModuleHandleA CloseHandle GetStartupInfoA

crash

?InitCrashHandler@@YA_NPBD0@Z

dsetup

ord11

Luxor.exe

IMPHASH ac171bffaa1bef5806315fe785b88d5d
SHA256 75ddbf5f23aecb475c1adff13fb90326699f399e895d0ed30fc1c63f6bae001e
MD5 5ef0660847b31fe959ad1e1487913a4e
SHA1 7201ba4fbcb1e86c20c71799845335788cd66991
SHA512 6fbb8d7bcc9c3632b39e3cc1d3b736b5bd71b4f48e35d31a78e3cd2cef66423f6945f0d4769317c1e9e31506c46032a242d6b4bd77d30bd52f714660f8002247
SSDEEP 3072:EW/cdQqHbvRflsxscJnxx2X0A29v68RhzZuEwQIWBq7lpQrfj5zwxh4sh4knFuuW:t/ciqHbvRxqZ77qRDIJlU4
TLSH
T153147C3134DA00F1D2822170219AE732E670EE7517790B8B7365FE3BBCB65A4A527277
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

115626

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

SetWindowsHookExA CallNextHookEx SetForegroundWindow GetDesktopWindow GetAsyncKeyState DefWindowProcA RegisterWindowMessageA UnhookWindowsHookEx MessageBoxA

core

?free@MemoryMgr@@QAEHHPAX@Z ?g_MemoryPtr@@3PAVMemoryMgr@@A ?GetString@Parser@@QAEPADXZ ?GetWindowWidth@Platform@@YAHXZ ?ParamEqualsInt32_2@Parser@@QAE_NPBD0PAH1@Z ?GetInt@Parser@@QAE_NPAH@Z ?GetFloat2@Parser@@QAE_NPAM0@Z ?GetEqualsToken@Parser@@QAE_NXZ ?MessageBoxA@Platform@@YAXPBD0ZZ ??0CommandLine@@QAE@XZ ?initialize@MemoryMgr@@QAEHXZ ??1CommandLine@@UAE@XZ ?addCommand@CommandLine@@QAEXPBDHH@Z ?init@CommandLine@@QAEXHPAPAD@Z ?SystemCheck@Platform@@YA_NXZ ?SetMinimized@Platform@@YAX_N@Z ?SetActive@Platform@@YAX_N@Z ?GetActive@Platform@@YA_NXZ ?RawKeyToLocalKey@Platform@@YAHH@Z ?GetAppFilePrefix@Platform@@YAPBDXZ ?SetApp@Platform@@YAXPAUHINSTANCE__@@@Z ?GetCPUInfo@@YAHXZ ?BeginTimePeriod@Platform@@YAXXZ ?EndTimePeriod@Platform@@YAXXZ ?touchMemory@MemoryMgr@@QAEXXZ ?checkMemory@MemoryMgr@@QAEHHPAI_N@Z ??0MemoryMgr@@QAE@XZ ?defineBank@MemoryMgr@@QAEHW4e_MemoryLocation@@W4e_MemoryBankType@@PBDI@Z ??1MemoryMgr@@UAE@XZ ?CreateDir@Platform@@YAHPBD@Z ?s_setLocalePath@StringTable@@SAXPBD@Z ?setLanguage@StringTable@@QAE_NPBD@Z ?SetAppState@Platform@@YAXW4e_AppState@@@Z ?Load3dSoundAPI@@YA_NPBD@Z ?sndCreateSnd3dSubsystem@@3P6GPAVsnd3dSubsystem@@XZA ?LoadGraphicsAPI@@YA_NPBD@Z ?gfxCreateGfxSubsystem@@3P6GPAVgfxSubsystem@@XZA ?GetPlatformOS@Platform@@YA?AW4e_OperatingSystem@@XZ ?LoadIconA@Platform@@YAPAUHICON__@@H@Z ?GetApp@Platform@@YAPAUHINSTANCE__@@XZ ?InitWindow@Platform@@YAPAUHWND__@@PAUHINSTANCE__@@PAU2@PBDPAUHICON__@@3HHHH_N4P6GJ1IIJ@Z@Z ?SetWindow@Platform@@YAXPAUHWND__@@@Z ?MessagePump@Platform@@YAHXZ ?GetWindow@Platform@@YAPAUHWND__@@XZ ?UnloadGraphicsAPI@@YA_NXZ ?Unload3dSoundAPI@@YA_NXZ ??1StringTable@@UAE@XZ ??0StringTable@@QAE@XZ ?mt_srand@@YAXI@Z ?GetTime@Platform@@YAIXZ ?mt_rand@@YAIXZ ?ParseLine@Parser@@QAE_NXZ ??0Parser@@QAE@PAD@Z ?alloc@MemoryMgr@@QAEPAXHIPBDI@Z ??1Parser@@UAE@XZ ?ParamEqualsBoolean@Parser@@QAE_NPBD0PA_N@Z ?ParamEqualsFloat32_2@Parser@@QAE_NPBD0PAM1@Z ?ParamEqualsFloat32@Parser@@QAE_NPBD0PAM@Z ?ParamEqualsInt32@Parser@@QAE_NPBD0PAH@Z ?ParamEqualsString@Parser@@QAE_NPBD0PADI@Z ?GetToken@Parser@@QAEPADPAD@Z ?cmdExists@CommandLine@@QAE_NPBD@Z ?GetCommandLineA@Platform@@YAPAVCommandLine@@XZ ?SpawnWebBrowser@Platform@@YAXPBD@Z ?getArgs@CommandLine@@QAE_NPBDPAHPAPAPAD@Z ?Sleep@Platform@@YAXI@Z ?GetAppVersion@Platform@@YAPBDXZ ?ReportCPUInfo@@YAXXZ ?GetAppTitle@Platform@@YAPBDXZ ?CreateAppFilename@Platform@@YAPBDPBD0@Z ?SetCommandLine@Platform@@YAXPAVCommandLine@@@Z

file

?initialize@File@@YA_N_N@Z ?loadArchive@File@@YAHPBD@Z ?registerThread@File@@YAXXZ ?unregisterThread@File@@YAXXZ ?seek@File@@YAHPAU_MjzFileType_s@@HH@Z ?open@File@@YAPAU_MjzFileType_s@@PBD0@Z ?getLength@File@@YAHPAU_MjzFileType_s@@@Z ?read@File@@YAIPAXIIPAU_MjzFileType_s@@@Z ?close@File@@YAHPAU_MjzFileType_s@@@Z ?write@File@@YAIPBXIIPAU_MjzFileType_s@@@Z ?setLocalePath@File@@YAXPBD@Z

ui2

?getType@uiVisualWidget@@UAEPBDXZ ?isType@uiVisualWidget@@UAE_NPBD@Z ?_update@uiVisualWidget@@MAEXHH@Z ?getType@uiRadioGroup@@UAEPBDXZ ?isType@uiRadioGroup@@UAE_NPBD@Z ?_render@uiProgressBar@@MAEXHH@Z ?_update@uiProgressBar@@MAEXHH@Z ?_parseParams@uiProgressBar@@MAEXPAVParser@@PAD@Z ??1uiProgressBar@@UAE@XZ ??0uiProgressBar@@QAE@XZ ?_inputEvent@uiVisualWidget@@MAE_NW4e_uiEvent@@HHH_N1@Z ?_deactivate@uiVisualWidget@@MAEXXZ ?setValue@uiProgressBar@@UAEXH_N@Z ?setValue@uiRadioGroup@@QAEXH@Z ?_parseParams@uiRadioGroup@@MAEXPAVParser@@PAD@Z ??1uiRadioGroup@@UAE@XZ ??0uiRadioGroup@@QAE@XZ ??_7uiNonVisualWidget@@6B@ ?addChild@uiWidget@@QAEXPAV1@_N@Z ?_parseParams@uiVisualWidget@@MAEXPAVParser@@PAD@Z ?_releaseSprite@uiWidget@@IAEXH@Z ??0uiVisualWidget@@QAE@XZ ??1uiVisualWidget@@UAE@XZ ?testBounds@uiVisualWidget@@UAE_NHH@Z ?_inputEvent@uiRadioButton@@MAE_NW4e_uiEvent@@HHH_N1@Z ??1uiRadioButton@@UAE@XZ ??0uiRadioButton@@QAE@XZ ?_parseParams@uiRadioButton@@MAEXPAVParser@@PAD@Z ?_parseSingleFlag@uiButton@@MAEXPBD@Z ?testBounds@uiButton@@UAE_NHH@Z ?_render@uiRadioButton@@MAEXHH@Z ?_update@uiButton@@MAEXHH@Z ?_activate@uiVisualWidget@@MAEXXZ ?_deactivate@uiButton@@MAEXXZ ?_loseFocus@uiButton@@MAEXXZ ?setAlpha@uiVisualWidget@@UAEXEII_N@Z ?releaseSprite@uiVisualWidget@@UAEXXZ ?setSprite@uiVisualWidget@@UAE_NPBDHH_N@Z ?setAnim@uiVisualWidget@@UAEXH@Z ?detachFromParent@uiWidget@@QAEXXZ ?setWidgetStates@uiWidget@@QAEX_N000@Z ?g_ui@@3PAVuiSubsystem@@A ?getWidget@uiWidget@@QAEPAV1@PBDH@Z ?setFrame@uiVisualWidget@@UAEXH@Z ?getFrame@uiVisualWidget@@UAEHXZ ?getSpriteId@uiVisualWidget@@UAEHXZ ?_parseHotkey@uiButton@@MAEXPBD@Z ?_getButtonAnim@uiButton@@MBEHXZ ?_resetHover@uiButton@@MAEX_N@Z ?s_fDeltaTime@uiWidget@@2MA ?isType@uiWidget@@UAE_NPBD@Z ??1uiWidget@@UAE@XZ ?_inputEvent@uiWidget@@MAE_NW4e_uiEvent@@HHH_N1@Z ?s_getDepthValue@uiWidget@@SAHPBD@Z ??1uiTextWidget@@UAE@XZ ??1uiNonVisualWidget@@UAE@XZ ??0uiWidget@@QAE@XZ ?_getDepthValue@uiWidget@@IAEHPBD@Z ??0uiTextWidget@@QAE@XZ ?applyScriptlet@uiWidget@@UAEXPBD@Z ?_parseBoolean@uiWidget@@MAE_NPAVParser@@@Z ?_parseParams@uiTextWidget@@MAEXPAVParser@@PAD@Z ?_parseFlags@uiWidget@@MAEXPAVParser@@@Z ?_parseSingleFlag@uiWidget@@MAEXPBD@Z ?update@uiWidget@@UAEXHH@Z ?render@uiWidget@@UAEXHH@Z ?inputEvent@uiWidget@@UAE_NW4e_uiEvent@@HHH_N1@Z ?initialize@uiWidget@@UAEXXZ ?getType@uiTextWidget@@UAEPBDXZ ?isType@uiTextWidget@@UAE_NPBD@Z ?testBounds@uiWidget@@UAE_NHH@Z ?setVisible@uiWidget@@UAEX_N0@Z ?setInputFocus@uiWidget@@UAEX_N0@Z ?setActive@uiWidget@@UBE_NXZ ?setActive@uiWidget@@UAEX_N0@Z ?overrideVisible@uiWidget@@UAEX_N@Z ?overrideInputFocus@uiWidget@@UAEX_N@Z ?overrideActive@uiWidget@@UAEX_N@Z ?getVisible@uiWidget@@UBE_NXZ ?getInputFocus@uiWidget@@UBE_NXZ ?getOverrideVisible@uiWidget@@UBE_NXZ ?getOverrideInputFocus@uiWidget@@UBE_NXZ ?getOverrideActive@uiWidget@@UBE_NXZ ?getWidth@uiTextWidget@@MBEHXZ ?getHeight@uiTextWidget@@MBEHXZ ?setWidth@uiWidget@@UAEXH@Z ?setHeight@uiWidget@@UAEXH@Z ?trace@uiWidget@@UAEPAU_uiTrace_s@@HHHPBD@Z ?_playWithPan@uiWidget@@UAEPAVsnd3dHandle@@PBDIMH@Z ?_initialize@uiWidget@@MAEXXZ ?_render@uiTextWidget@@MAEXHH@Z ?_update@uiTextWidget@@MAEXHH@Z ?_inputEvent@uiTextWidget@@MAE_NW4e_uiEvent@@HHH_N1@Z ?_trace@uiWidget@@MAEPAU_uiTrace_s@@HHHPBD@Z ?_showWidget@uiWidget@@MAEXXZ ?_hideWidget@uiWidget@@MAEXXZ ?_activate@uiWidget@@MAEXXZ ?_deactivate@uiWidget@@MAEXXZ ?_gainFocus@uiWidget@@MAEXXZ ?_loseFocus@uiWidget@@MAEXXZ ?setAlpha@uiTextWidget@@UAEXEII_N@Z ?setFont@uiTextWidget@@UAE_NPBD@Z ?setJustify@uiTextWidget@@UAEXI@Z ?_print@uiTextWidget@@MAEXHPBI@Z ?_lerpToTargetAlpha@uiTextWidget@@MAEXXZ ?_parseParams@uiWidget@@MAEXPAVParser@@PAD@Z ?getType@uiNonVisualWidget@@UAEPBDXZ ?isType@uiNonVisualWidget@@UAE_NPBD@Z ?getWidth@uiWidget@@UBEHXZ ?getHeight@uiWidget@@UBEHXZ ?_render@uiNonVisualWidget@@MAEXHH@Z ?_update@uiNonVisualWidget@@MAEXHH@Z ?_inputEvent@uiNonVisualWidget@@MAE_NW4e_uiEvent@@HHH_N1@Z ?setAlpha@uiWidget@@UAEXEII_N@Z ?registerProgCb@uiWidget@@SAXP6AXPAV1@PAXW4e_uiProgressEvent@@@Z1@Z ?gfxStatistics@uiSubsystem@@QAEX_NPBD@Z ?setTopLevelWidget@uiSubsystem@@QAEXPAVuiWidget@@@Z ?assignCallbacks@uiWidget@@QAEXPAU_WidgetMap_s@@PAX@Z ?setValue@uiSliderButton@@QAEXM@Z ?getValue@uiSliderButton@@QBEMXZ ?step@uiProgressBar@@QAEXXZ ?getTextRect@uiTextWidget@@QBEXPAU_uiRect_s@@@Z ?reset@uiParticleSystem@@QAEXXZ ?setRange@uiProgressBar@@QAEXHH@Z ?setInputFocusWidget@uiSubsystem@@QAEXPAVuiWidget@@@Z ?initialize@uiSubsystem@@QAEHPAVPreferences@@@Z ??0uiSubsystem@@QAE@XZ ??1uiSubsystem@@UAE@XZ ?shutdown@uiSubsystem@@QAEHXZ ?forceTerminate@uiSubsystem@@QAEXXZ ?render@uiSubsystem@@QAEHI@Z ?defineDepth@uiWidget@@SAXPBDI@Z ?inputEvent@uiSubsystem@@QAEXW4e_uiEvent@@HHH@Z ?stop@uiParticleSystem@@QAEXXZ ?topDialog@uiSubsystem@@QAEPAVuiDialog@@XZ ?isDialogPushed@uiSubsystem@@QAE_NPAVuiDialog@@@Z ?pushDialog@uiSubsystem@@QAEXPAVuiDialog@@_N@Z ?topDialogIsIdle@uiSubsystem@@QAE_NPAVuiDialog@@@Z ?disable@uiButton@@QAEXXZ ?getText@uiTextWidget@@QAEPBIXZ ?getValue@uiRadioGroup@@QBEHXZ ?reportDialogStack@uiSubsystem@@QAEXXZ ?popDialog@uiSubsystem@@QAEXPAVuiDialog@@_N@Z ?s_registerWidget@uiSubsystem@@SAXPBDP6APAVuiWidget@@XZ@Z ?s_dynamicLoading@uiWidget@@2_NA ?print@uiTextWidget@@QAAXHPBDZZ ?loadUI@uiSubsystem@@QAEPAVuiWidget@@PBD@Z ?_render@uiVisualWidget@@MAEXHH@Z

snd3d

?initialize@snd3dSubsystem@@QAEHPAVPreferences@@PAUHWND__@@_N@Z ?setCoopLevel@snd3dSubsystem@@QAEXPAUHWND__@@_N@Z ?shutdown@snd3dSubsystem@@QAEHXZ ?update@snd3dSubsystem@@QAEXM@Z ?loadSoundLibrary@snd3dSubsystem@@QAEHPBD@Z ?setMute@snd3dSubsystem@@QAEXW4e_snd3dSoundTypes@@_N@Z ?getMasterVolume@snd3dSubsystem@@QAEMW4e_snd3dSoundTypes@@@Z ?setMasterVolume@snd3dSubsystem@@QAEXW4e_snd3dSoundTypes@@M@Z ?suspend@snd3dSubsystem@@QAEX_N@Z ?setFrequencyScale@snd3dHandle@@QAEXM@Z ?playSound@snd3dSubsystem@@QAEPAVsnd3dHandle@@W4e_snd3dSoundTypes@@PBD_N2@Z ?setLoop@snd3dHandle@@QAEX_N@Z ?stop@snd3dHandle@@QAEXXZ ?startPlaylist@snd3dSubsystem@@QAEXPBD0_N@Z ?stopPlaylist@snd3dSubsystem@@QAEX_N@Z ?g_snd3d@@3PAVsnd3dSubsystem@@A

gfx2d

?moveWindow@gfxSubsystem@@QAEXXZ ?displayChanged@gfxSubsystem@@QAEXPAUHWND__@@HHH@Z ?suspendRenderer@gfxSubsystem@@QAEX_N@Z ?defineDepthNode@gfxSubsystem@@QAEXPBDI@Z ?update@gfxSubsystem@@QAEHI@Z ?getSpriteFrameCount@gfxSubsystem@@QBEHHH@Z ?createParticleSystem@gfxSubsystem@@QAEHPBD@Z ?registerThread@gfxSubsystem@@QAEXPBD@Z ?unregisterThread@gfxSubsystem@@QAEXPBD@Z ?line@gfxSubsystem@@QAEXHHHHHMQBE@Z ?createSprite@gfxSubsystem@@QAEHPBD@Z ?getSpriteHeight@gfxSubsystem@@QBEHH@Z ?getSpriteWidth@gfxSubsystem@@QBEHH@Z ?g_gfx@@3PAVgfxSubsystem@@A ?createParticleSystemInstance@gfxSubsystem@@QAEHPBDHP6AXPAXW4e_ParticleEvents@@PAVgfxParticleSystemInstance@@H@Z1@Z ?psemit@gfxSubsystem@@QAEXHHM@Z ?blt@gfxSubsystem@@QAEXHHHHHHE@Z ?particleSystemInstanceIsDead@gfxSubsystem@@QAE_NH@Z ?particleSystemInstanceStopEmitters@gfxSubsystem@@QAEXH@Z ?blt@gfxSubsystem@@QAEXHHHHHHHHHHE@Z ?g_whiteColor@@3PAEA ?bltx_f@gfxSubsystem@@QAEXHHHMMHHQAEEM_NM1@Z ?isHardwareAccelerated@gfxSubsystem@@QBE_NXZ ?releaseParticleSystem@gfxSubsystem@@QAEXPBD@Z ?createFont@gfxSubsystem@@QAEHPBD@Z ?releaseParticleSystemInstance@gfxSubsystem@@QAEXH@Z ?updateParticleSystem@gfxSubsystem@@QAEXHHHM@Z

logger

?log@udLogger@@SAXHPBDZZ ?registerClient@udLogger@@SAHPBD@Z ?terminate@udLogger@@SAXXZ ?isVisible@udLogger@@SA_NXZ ?start@udLogger@@SAXPBD@Z ?ReportLastError@@YAXXZ ?showWindow@udLogger@@SAX_N@Z

msvcrt

sprintf _purecall _CIacos strncpy sscanf _beginthreadex atoi __CxxFrameHandler _snprintf _stricmp _controlfp _onexit __dllonexit _except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit __p___argv __p___argc _wcslwr fopen fclose _ftol

kernel32

WaitForSingleObject ReleaseMutex Sleep CreateMutexA WritePrivateProfileStringA GetPrivateProfileIntA GetPrivateProfileStringA GetVersionExA GetModuleHandleA CloseHandle GetStartupInfoA

crash

?InitCrashHandler@@YA_NPBD0@Z

dsetup

ord11

Read_Me.htm

SHA256 2270f3a30d5581796f57d3ab471cff906bcdd1b1d486893078f27f47658874f6
MD5 88a0de08687270a020130c34d2f2458e
SHA1 c4ebf7e9be900402ca7b02ba8fd87573ae47a0a9
SHA512 79fc8acbac0c7f29d9ee812ad4756fc1297694d19fb6fdd11e839b491c35aae80828081a3d624edf3fffcd4e64c68a1a97b6698dabd465f12aecc1d0a430367a
SSDEEP 1536:tPCWC6mBdeKg93UhEnTY3ZscEm/SBtu0ev:lqX
TLSH
T110233100E7512403907B85CDF06B178E248096649393EE65F13B697FBDCAAAD36872FC
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

assets/MJ.ico

SHA256 5719ebe5a613a83b4d29131ed9b8b7176129258a8e8045021297c5708b92d1f4
MD5 22fc9d32923708b0b4c96985b810ebc7
SHA1 5e25506d299829842f6533e0dfae11989b4bab10
SHA512 d66b98fafad2dd3107b920ee953fc2b71dd4bb6ba0b9de5ccecbf42cf1de02943762af158d787f1e364d2af13aaf45b8ce693ffe03dbc79b356b2bc3228b1df1
SSDEEP 384:7fXDyObtKN4N384WuVd+zZLCMjgWVsTjg0YO51fpXNBxOI8W/GE:77ybKN384WsIZLHgWV0YAxdYE
TLSH
T197B2E7772A66A581D1619A349143C82C4D24DFA339D0AF231F817FDFBDB0BB8A081997
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

assets/Thumbs.db

SHA256 eb628d19916534f6129051bf10eb4586814350ebeee30baa04ece37f970ccd88
MD5 dbfa27d89ce919ee8f679b9b953ff5d9
SHA1 f210a91cddaf39069b467cfe8ee3ef3e8b3d85e9
SHA512 02d5a8d6e6a9d5904ba18e3acb4ba0c4f6b520c1527944fa402c0d719c79c669bbc8767da0780346e9a0c23dde3f5b1130907a2fe217e3301b8baca7842ff8a5
SSDEEP 192:+bTlQyd6dMakxnu+d7ye7qKLsvOOquWbdcogS47UhW9V1w/Uv3nfKLGy:ETSy2rkxTT7OvOO2dX4nw/Ss
TLSH
T198629D86765297F4FC2AAB744F108E21A5E4BD00AAC0234BBCE47BA5D672FC01D48D4C
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

assets/button_moregames.jpg

SHA256 3d678047b4b1d676cddca01fb6c9987fadbcbc4ad2af946f6dd6a64ce5b94c55
MD5 49d337db5882df3a40f8963f0696876f
SHA1 f8e7f8b1ebfc61b5cbf59758a853dae53170688d
SHA512 1e1ad45993b39c111440d4aa6374568043a03f290b04e2096af299593f9e6d778d2b85779c7c9845a3b56081c17c730480bffa68a7334bf7a29aaf82956d8974
SSDEEP 1536:QE2BEkSUdE2BEkSUqNyT6droKd4C6K97Oq:QV+UdV+Uum6pd4Cn
TLSH
T10D33D0238353AE13EDC2573120A7F3DCA373E60692476587721D29843769B928F7836A
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

assets/button_moregames.spr

SHA256 33b0eca9ace2763fe02a9f9f1bcbbbfae4076fdc825fe915d76866daf9af0a56
MD5 9f168afa593a156a819fd5ccc126089e
SHA1 450ad211e3e73556e41fa3cdba0790b96b9d98a8
SHA512 6ef369003eabf0df27273d0967dd246cf354b74e1d46c8adeca4716090f8688e16b43716949f98a472c3448983f35b7413da29b9da10a770c85691acabef1e48
TLSH
T12EA011C008A00C0FAB3C0AAF0B2B20C03A8C3C8AE000A0B02A828CA00220C23B20A832
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

assets/splashscreen.jpg

SHA256 0be44d6bc7d8ec7965f94489bb121170de1b174aa15068efaafbd8ce13b6cd0f
MD5 5b4c7655fae06b8d2e56f01706b5064e
SHA1 39cc517fd463ef48b24e76a4d64f2e582b5ff55d
SHA512 31987808115a0d936218e2c4d2136febd2613a9482e6843ec4ceeb0091bb87ac72462c4683805083601b8523be945a6fa9b302cc8d4b53db80fee8fdb2b54295
SSDEEP 3072:JZEpMD2XfMQAwNonQf4IHyquy8mCd4az8n+fNNUDXZkdY0ozY/:UfMQxoQf4MyquHmy4az8nNyek
TLSH
T14914128102E27C80E6E11D74B8C0E3D7BD60899776F3EED7743C69A27F26B22855D294
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

core.dll

IMPHASH ee9cfde202729211ebf320daaebc0478
SHA256 86360b86275d25b2668e640a7d46611d4397ed0348d57bbb4637a1a7a805207e
MD5 7ecd611d0af701520ed1ce10047a8553
SHA1 d7673f5ce5917c8220c78f0024be58566f65522f
SHA512 e42744530abede52427e1cb012e05aea667bebe35094c3df54cc79e3db2d1ace90e4cbd1ea03d9622af18c3f8e3719413d5e0b1470ce1221d70962e9389a058e
SSDEEP 768:9aFF+Oq9pXiK/maHeyJVgDPSkqEA5hSo0Da/4q:9a2Oq9RiKOa+yJVaLqEA5eDa/p
TLSH
T1AB435B0299B425F7C280C0363BDCA73BFD76D48585A28D5B0F37CD687E65227B42B662
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

29581

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

gdi32

GetDeviceCaps GetStockObject

user32

SetForegroundWindow SetActiveWindow ShowWindow BringWindowToTop AdjustWindowRect RegisterClassExA LoadCursorA UnregisterClassA PostQuitMessage MessageBoxA CreateWindowExA DestroyWindow ChangeDisplaySettingsA SetWindowPos SetWindowLongA GetCursorPos SetCursorPos ClipCursor ReleaseCapture GetClientRect GetWindowLongA SetCapture ShowCursor PeekMessageA TranslateMessage DispatchMessageA LoadIconA GetDesktopWindow GetDC ReleaseDC GetWindowRect

winmm

timeEndPeriod timeBeginPeriod timeGetTime

shell32

SHGetSpecialFolderPathA ShellExecuteA

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

file

?close@File@@YAHPAU_MjzFileType_s@@@Z ?read@File@@YAIPAXIIPAU_MjzFileType_s@@@Z ?getLength@File@@YAHPAU_MjzFileType_s@@@Z ?open@File@@YAPAU_MjzFileType_s@@PBD0@Z

logger

?ReportLastError@@YAXXZ ?log@udLogger@@SAXHPBDZZ

msvcrt

_adjust_fdiv _initterm _onexit __dllonexit ?terminate@@YAXXZ _except_handler3 qsort sprintf _vsnprintf strncat tolower __CxxFrameHandler strtok exit _ftol fprintf fopen fread strncmp sscanf fclose malloc realloc free _purecall strncpy _snprintf _stricmp

kernel32

DisableThreadLibraryCalls GetPrivateProfileStringA GetPrivateProfileIntA WritePrivateProfileStringA SetFileAttributesA GetWindowsDirectoryA GetPrivateProfileSectionNamesA WritePrivateProfileSectionA GetFileAttributesA FindFirstFileA FindNextFileA GetLastError FindClose CreateDirectoryA Sleep GetModuleHandleA GetModuleFileNameA GetVersionExA LoadLibraryA GetProcAddress FreeLibrary EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection

??0CommandLine@@QAE@ABV0@@Z ??0CommandLine@@QAE@XZ ??0MemoryMgr@@QAE@ABV0@@Z ??0MemoryMgr@@QAE@XZ ??0Parser@@QAE@ABV0@@Z ??0Parser@@QAE@PAD@Z ??0StringTable@@QAE@ABV0@@Z ??0StringTable@@QAE@XZ ??1CommandLine@@UAE@XZ ??1MemoryMgr@@UAE@XZ ??1Parser@@UAE@XZ ??1StringTable@@UAE@XZ ??4CommandLine@@QAEAAV0@ABV0@@Z ??4MemoryMgr@@QAEAAV0@ABV0@@Z ??4Parser@@QAEAAV0@ABV0@@Z ??4StringTable@@QAEAAV0@ABV0@@Z ??_7CommandLine@@6B@ ??_7MemoryMgr@@6B@ ??_7Parser@@6B@ ??_7StringTable@@6B@ ?BeginTimePeriod@Platform@@YAXXZ ?CaptureMouse@Platform@@YAX_N@Z ?CreateAppFilename@Platform@@YAPBDPBD0@Z ?CreateDir@Platform@@YAHPBD@Z ?DestructWindow@Platform@@YAXPAUHWND__@@@Z ?EndTimePeriod@Platform@@YAXXZ ?ForceHideWindow@Platform@@YAXXZ ?GetActive@Platform@@YA_NXZ ?GetApp@Platform@@YAPAUHINSTANCE__@@XZ ?GetAppDataDir@Platform@@YAPBDPBD@Z ?GetAppFilePrefix@Platform@@YAPBDXZ ?GetAppTitle@Platform@@YAPBDXZ ?GetAppVersion@Platform@@YAPBDXZ ?GetBoolean@Parser@@QAE_NXZ ?GetCPUInfo@@YAHXZ ?GetCloseBrace@Parser@@QAE_NXZ ?GetCommandLineA@Platform@@YAPAVCommandLine@@XZ ?GetCurrentLine@Parser@@QBEPBDXZ ?GetCursorPos@Platform@@YAXAAH0@Z ?GetDesktopInfo@Platform@@YAXAAH00@Z ?GetEqualsToken@Parser@@QAE_NXZ ?GetFloat2@Parser@@QAE_NPAM0@Z ?GetFloat@Parser@@QAE_NPAM@Z ?GetInt2@Parser@@QAE_NPAH0@Z ?GetInt3@Parser@@QAE_NPAH00@Z ?GetInt@Parser@@QAE_NPAH@Z ?GetLine@Parser@@QBEIXZ ?GetMinimized@Platform@@YA_NXZ ?GetOpenBrace@Parser@@QAE_NXZ ?GetPlatformOS@Platform@@YA?AW4e_OperatingSystem@@XZ ?GetString@Parser@@QAEPADXZ ?GetTime@Platform@@YAIXZ ?GetToken@Parser@@QAEPADPAD@Z ?GetVideoInfo@Platform@@YAXPAPBDPAH11PA_N@Z ?GetWindow@Platform@@YAPAUHWND__@@XZ ?GetWindowHeight@Platform@@YAHXZ ?GetWindowPos@Platform@@YAXAAH0@Z ?GetWindowWidth@Platform@@YAHXZ ?InitWindow@Platform@@YAPAUHWND__@@PAUHINSTANCE__@@PAU2@PBDPAUHICON__@@3HHHH_N4P6GJ1IIJ@Z@Z ?Load3dSoundAPI@@YA_NPBD@Z ?LoadCursorA@Platform@@YAPAUHICON__@@H@Z ?LoadGraphicsAPI@@YA_NPBD@Z ?LoadIconA@Platform@@YAPAUHICON__@@H@Z ?LoadSoundAPI@@YA_NPBD@Z ?MessageBoxA@Platform@@YAXPBD0ZZ ?MessagePump@Platform@@YAHXZ ?ParamEqualsBoolean@Parser@@QAE_NPBD0PA_N@Z ?ParamEqualsFloat32@Parser@@QAE_NPBD0PAM@Z ?ParamEqualsFloat32_2@Parser@@QAE_NPBD0PAM1@Z ?ParamEqualsFloat32_2x@Parser@@QAE_NPBD0PAM1@Z ?ParamEqualsInt16@Parser@@QAE_NPBD0PAF@Z ?ParamEqualsInt32@Parser@@QAE_NPBD0PAH@Z ?ParamEqualsInt32_2@Parser@@QAE_NPBD0PAH1@Z ?ParamEqualsInt32_2x@Parser@@QAE_NPBD0PAH1@Z ?ParamEqualsInt64@Parser@@QAE_NPBD0PA_J@Z ?ParamEqualsInt8@Parser@@QAE_NPBD0PAC@Z ?ParamEqualsString@Parser@@QAE_NPBD0PADI@Z ?ParamEqualsUInt32@Parser@@QAE_NPBD0PAI@Z ?ParseChar@Parser@@QAE_NPAD@Z ?ParseFloat2@Parser@@QAE_NPAM0@Z ?ParseFloat2x@Parser@@QAE_NPAM0@Z ?ParseFloat@Parser@@QAE_NPAM@Z ?ParseInteger2@Parser@@QAE_NPAH0@Z ?ParseInteger2x@Parser@@QAE_NPAH0@Z ?ParseInteger3@Parser@@QAE_NPAH00@Z ?ParseInteger@Parser@@QAE_NPAH@Z ?ParseLine@Parser@@QAE_NXZ ?ParseString@Parser@@QAE_NPAD@Z ?ParseUTF8@Parser@@QAE_NPAE@Z ?RawKeyToLocalKey@Platform@@YAHH@Z ?RegGetInt32@Platform@@YAHPBD0H@Z ?RegGetString@Platform@@YAXPBD0PAD1@Z ?RegInit@Platform@@YA_NPBDAA_N@Z ?RegInitSecureKey@Platform@@YA_NPBDAA_N@Z ?RegSetInt32@Platform@@YA_NPBD0H@Z ?RegSetString@Platform@@YA_NPBD0PAD@Z ?ReportCPUInfo@@YAXXZ ?ScanDir@Platform@@YAHPBDPAPAY0BAE@DP6AH0@ZP6AHPBX3@Z@Z ?ScanDirFree@Platform@@YAXPAY0BAE@D@Z ?SetActive@Platform@@YAX_N@Z ?SetApp@Platform@@YAXPAUHINSTANCE__@@@Z ?SetAppState@Platform@@YAXW4e_AppState@@@Z ?SetCommandLine@Platform@@YAXPAVCommandLine@@@Z ?SetCursorPos@Platform@@YAXHH@Z ?SetFullscreenWindow@Platform@@YAXPAUHWND__@@_NHH@Z ?SetMinimized@Platform@@YAX_N@Z ?SetRenderAPI@Platform@@YAXPBD@Z ?SetVideoInfo@Platform@@YAXHHH_N@Z ?SetWindow@Platform@@YAXPAUHWND__@@@Z ?SetWindowPos@Platform@@YAXXZ ?ShowCursor@Platform@@YAX_N@Z ?Sleep@Platform@@YAXI@Z ?SpawnWebBrowser@Platform@@YAXPBD@Z ?SystemCheck@Platform@@YA_NXZ ?Unload3dSoundAPI@@YA_NXZ ?UnloadGraphicsAPI@@YA_NXZ ?UnloadSoundAPI@@YA_NXZ ?_allocExtNode@MemoryMgr@@AAEPAXPAUMemoryBank_s@@IPBDI@Z ?_calcMemorySize@MemoryMgr@@AAEIW4e_MemoryLocation@@@Z ?_compactHeapNode@MemoryMgr@@AAE_NPAUMemoryBank_s@@PAUMemoryHeapNode_s@@@Z ?_createMemoryBanks@MemoryMgr@@AAEHXZ ?_exportStringTable@StringTable@@IAEXXZ ?_freeAllMemory@MemoryMgr@@AAEXXZ ?_heapAddFreeNode@MemoryMgr@@AAEXPAUMemoryBank_s@@PAUMemoryHeapNode_s@@@Z ?_heapBestFit@MemoryMgr@@AAEPAXPAUMemoryBank_s@@AAIPBDI@Z ?_heapExtFree@MemoryMgr@@AAEHPAUMemoryBank_s@@PAUMemoryHeapNode_s@@PAI@Z ?_heapFindBestFit@MemoryMgr@@AAEPAUMemoryHeapNode_s@@PAUMemoryBank_s@@I@Z ?_heapFree@MemoryMgr@@AAEHPAUMemoryBank_s@@PAXPAI@Z ?_insertString@StringTable@@IAEXPBDPBE@Z ?_parseCmdLine@CommandLine@@IAEXXZ ?_parseStringTableEntry@StringTable@@IAEXPAVParser@@@Z ?_preparseLine@Parser@@IAEPADPAD@Z ?_preparseLineAllowSpaces@Parser@@IAEPADPAD@Z ?_processCmd@CommandLine@@IAEHHH@Z ?_readBankSizes@MemoryMgr@@AAEXXZ ?_stringTableFilename@StringTable@@IAEPBDXZ ?_writeBankSizes@MemoryMgr@@AAEXXZ ?addCommand@CommandLine@@QAEXPBDHH@Z ?alloc@MemoryMgr@@QAEPAXHIPBDI@Z ?checkMemory@MemoryMgr@@QAEHHPAI_N@Z ?cmdExists@CommandLine@@QAE_NPBD@Z ?defineBank@MemoryMgr@@QAEHW4e_MemoryLocation@@W4e_MemoryBankType@@PBDI@Z ?defineLocAllocCb@MemoryMgr@@QAEHW4e_MemoryLocation@@P6APAXI@Z@Z ?defineLocFreeCb@MemoryMgr@@QAEHW4e_MemoryLocation@@P6AXPAX@Z@Z ?defineLocReallocCb@MemoryMgr@@QAEHW4e_MemoryLocation@@P6APAXPAXI@Z@Z ?fileIsReadOnly@Platform@@YA_NPBD@Z ?free@MemoryMgr@@QAEHHPAX@Z ?g_CPUInfo@@3UCPUInfo_s@@A ?g_MemoryPtr@@3PAVMemoryMgr@@A ?g_stringTblPtr@@3PAVStringTable@@A ?getArgs@CommandLine@@QAE_NPBDPAHPAPAPAD@Z ?getMemoryBankSize@MemoryMgr@@QBEHH@Z ?getSize@MemoryMgr@@QAEIHPAX@Z ?gfxCreateGfxSubsystem@@3P6GPAVgfxSubsystem@@XZA ?init@CommandLine@@QAEXHPAPAD@Z ?initialize@MemoryMgr@@QAEHXZ ?mt_rand@@YAIXZ ?mt_srand@@YAXI@Z ?reset@Parser@@QAEXXZ ?s_localePath@StringTable@@0PADA ?s_setLocalePath@StringTable@@SAXPBD@Z ?sc_stringFileName@StringTable@@0PBDB ?setLanguage@StringTable@@QAE_NPBD@Z ?sndCreateSnd3dSubsystem@@3P6GPAVsnd3dSubsystem@@XZA ?sndCreateSndSubsystem@@3P6GPAVsndSubsystem@@XZA ?touchMemory@MemoryMgr@@QAEXXZ ?translate@StringTable@@QAEPBEPBD@Z

crash.dll

IMPHASH 1d87952ff2cb87aa3004567d0c2e9525
SHA256 64ef7a1414d02ac6e65a6588097b9b5ad87f12072c9fdfda20f6b49eae4bf307
MD5 db527de6ae97908ba772f4e1abbeab31
SHA1 4c8ea2bd0c13f0714b0c4b2ab9138166a2f3d13f
SHA512 4f0e47397ebed8179718010f82e8fd3cb2df41c526fb12f66980cc83f1ee07a1290cbc9c836656414ee66974993c596d63bedbb5b8924763ba7ca13e0a75a22f
SSDEEP 1536:iMoVm4jFmop00m7WR6VTTQcSEB1I5BoLbwGjrbXsw4DAv:iMoVdmoQ7WwFQjFUVrjsbDAv
TLSH
T1F4938D2167F340F2D196157624B58F3BAB7D6E10CEF28D8B8B93D8591E30992D636307
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16066

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

dsetup

ord11

core

?CreateAppFilename@Platform@@YAPBDPBD0@Z ?g_MemoryPtr@@3PAVMemoryMgr@@A ?MessageBoxA@Platform@@YAXPBD0ZZ ?GetVideoInfo@Platform@@YAXPAPBDPAH11PA_N@Z ?GetAppTitle@Platform@@YAPBDXZ ?GetAppVersion@Platform@@YAPBDXZ ?free@MemoryMgr@@QAEHHPAX@Z ?ForceHideWindow@Platform@@YAXXZ ?CaptureMouse@Platform@@YAX_N@Z ?SystemCheck@Platform@@YA_NXZ

user32

SendDlgItemMessageA DialogBoxParamA EnableWindow GetClientRect PeekMessageA TranslateMessage DispatchMessageA DestroyWindow CreateWindowExA ShowWindow DefWindowProcA RegisterClassExA GetDesktopWindow GetDlgItem SetWindowPos GetWindowRect EndDialog

ole32

OleUninitialize CoCreateInstance OleInitialize

oleaut32

SafeArrayCreateVector SafeArrayDestroy

kernel32

SetEndOfFile GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA IsBadCodePtr IsBadReadPtr CreateFileA SetStdHandle VirtualAlloc InterlockedIncrement InterlockedDecrement VirtualFree HeapCreate HeapDestroy GetEnvironmentVariableA GetEnvironmentStringsW GetEnvironmentStrings WideCharToMultiByte FreeEnvironmentStringsW FreeEnvironmentStringsA SetFilePointer GetStartupInfoA GetFileType SetErrorMode GetModuleHandleA GetModuleFileNameA SetUnhandledExceptionFilter GetCurrentProcess FormatMessageA VirtualQuery IsBadWritePtr GetCurrentThread GetLastError GetProcAddress LoadLibraryA GlobalMemoryStatus GetSystemInfo GetVersionExA Sleep MultiByteToWideChar RtlUnwind ExitProcess TerminateProcess GetCommandLineA GetVersion EnterCriticalSection LeaveCriticalSection HeapFree CloseHandle InitializeCriticalSection GetCurrentThreadId TlsSetValue TlsAlloc TlsFree SetLastError TlsGetValue HeapReAlloc HeapAlloc HeapSize DeleteCriticalSection GetCPInfo GetACP GetOEMCP FlushFileBuffers WriteFile ReadFile SetHandleCount GetStdHandle

data/data.mjz

SHA256 14496cdf0b121a6eb475e8696ed28164b39a1a91de788de9aa23d93e5c0ef4f1
MD5 0558b1e946583d246352dac1fd6119b1
SHA1 151cd7a3768a66fcc9d9b865d86d0a44c5f2f620
SHA512 b4fcecb906a415797854a3b0b44374f9c127c34768c87a6c43f5ad9675d9a0da731d18a7efdabb615920d3d82ec15a12fb3c56fcba3da03c689f2190935761db
SSDEEP 196608:sFrp6yomiA+VmauPSAjBpjEXtY3PshOXRW0JVh26IUc2ls:szF+VIHpctY0hOj25Ucd
TLSH
T152E6E0617A119E61F5E916302CB5F385A3B27F1A7ED3AA82718C7B0D3F71B805D99203
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

data/english.mjz

SHA256 f18a9c357f1934b98415b5f32887504f9d12c32880468b86e69d8ddce3d3a1fa
MD5 e44b1ad6e14e9f04adfda9ac32501f0d
SHA1 b2b3c37b39018724020a3f27a3d98af7ba972c98
SHA512 d5e14bb6845a3e5b9a1fc02a9ef7fd7d45ecd78e604a62affbf59556d2e060ec2d79ffadeabcf1133d6e01212b86961ff7c7cbd28385b5e830ba9ca3a547ccbc
SSDEEP 49152:6CPfCrfCAY3siuiBVsRpKlxQIW8KvuA91mxTmxDy:BPfCrfCAY3siuifszKlxQIW8OB1mFmNy
TLSH
T129C5F1317B05EF62EAD542309DA6D789D221BF06A6936A43305C7B1F3FB0BC15E5E206
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

dsetup.dll

IMPHASH d4a6ad81669c70ab6cd1669f58cfcb28
SHA256 0fdfff9a5db0bd4b16a9663a6616308c511a21e3bec0bbed60ddfa2597c73acf
MD5 4f5f399a970a921f883975a2228a1c8c
SHA1 f2c39bde79a6d91f8e35dd4eee5ebed4573c5615
SHA512 7a03587c77eaad433fb49694b9cabbc0bda8e8554a97ee3ec63ca09dd7df37cae0031c1b9b52ab4d76d45fd847adf5a7680bb0dc803166ce4fb4cfc12aa017ef
SSDEEP 768:7M0v0mWosSeNwRQy1E5MYDgZBC7Q3+jPJmEDUWe:7PdRzeNwp25MY8nC83+LJmEDTe
TLSH
T192F25C1279A180B3D151463529E9A702A3BF802456FE8D87CF1857999E733D7BB3E307
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

13657

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetSystemDirectoryA GetCurrentDirectoryA lstrlenA GetModuleFileNameA LocalFree LocalAlloc lstrcmpiA GetDiskFreeSpaceA GetWindowsDirectoryA MultiByteToWideChar lstrcmpA WideCharToMultiByte GetSystemDefaultLCID IsBadStringPtrA IsBadReadPtr IsBadStringPtrW lstrlenW GetCurrentThreadId TlsSetValue GetCommandLineA HeapFree HeapAlloc ExitProcess GetModuleHandleA TlsFree SetLastError TlsGetValue TlsAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings SetCurrentDirectoryA GetEnvironmentStringsW HeapDestroy HeapCreate VirtualFree WriteFile LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc GetACP GetOEMCP GetCPInfo InitializeCriticalSection GetStringTypeA GetStringTypeW GetLocaleInfoA LCMapStringA LCMapStringW VirtualProtect GetSystemInfo VirtualQuery RtlUnwind GetVersionExA lstrcpyA lstrcatA LoadLibraryA GetProcAddress OutputDebugStringA CreateMutexA GetLastError CloseHandle FreeEnvironmentStringsW FreeLibrary

user32

wsprintfW wsprintfA GetKeyboardType DestroyWindow SetFocus CreateDialogParamA SetDlgItemTextA MessageBoxA PeekMessageA GetMessageA TranslateMessage DispatchMessageA

advapi32

RegCloseKey RegOpenKeyExA RegDeleteKeyA RegEnumKeyExA RegQueryInfoKeyA RegSetValueExA RegCreateKeyExA RegSetValueExW RegCreateKeyExW RegQueryValueExA

winmm

mmioRead mmioDescend mmioOpenA mmioClose

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

ole32

StringFromGUID2

file.dll

IMPHASH 04baaf9cf52d488178d354e5a7198f48
SHA256 c59cccf662344e978f3ddcd8c080b807f79a84c001aefd49ddb80f7aaec8832f
MD5 671cc1e11d5721fc5c07284c17ee5903
SHA1 6b8a521ed2109a559f0cc70fa460e88c8351d943
SHA512 3eb987e0873536ac47a86a5364e31c64937651f957b221e02b7cd5197a9095b1bd6ce734be861fbdcaf91c57cc0eeab221aba915d55b369831930801a5c77242
SSDEEP 384:JyxFATdh8tkiy8o4BsiZuZfhHNMS7Czk31MDob3:YxShYyvSUhyQCzw1Mc
TLSH
T121D229173A3210F2D18A167132DA733BAA35DFA5564517A3D3E3ED30953B623F026B64
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

13537

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

fmod.dll

SHA256 7c6f7495d0a981f646bc23fdb39c0e349c598f5d6f4ef0ee58311338ae760194
MD5 f51a7dd4d040a9c079cf64d36f569673
SHA1 430cff3cd81c0cec45207caa98ecf1ccc2b4971c
SHA512 79ff5a3522559e6dc0f971cbceb07be0a39a5d538590cb9a9f3d52970c0cda1a12da1d8055de923097a7485b1dcfa54dc56709520073c9395607624c0a1a6df2
SSDEEP 3072:66COMOtCkffbueK5QlfQxHTaR2mfm+G95QLOZRnFMFsE9JTjaZsKEb:jcB0bBfWHTaR2mfm+G95nZxFMyy52Zs9
TLSH
T10CF301B571ED603EDBFB04F617C9DF718859B53707F22A94114AA28A089C10F6E82F97
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

ACProtect 1.3x - 1.4x DLL software

Detects file using ACProtect software.
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

600112

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

_FMUSIC_FreeSong@4 _FMUSIC_GetBPM@4 _FMUSIC_GetGlobalVolume@4 _FMUSIC_GetMasterVolume@4 _FMUSIC_GetName@4 _FMUSIC_GetNumChannels@4 _FMUSIC_GetNumInstruments@4 _FMUSIC_GetNumOrders@4 _FMUSIC_GetNumPatterns@4 _FMUSIC_GetNumSamples@4 _FMUSIC_GetOpenState@4 _FMUSIC_GetOrder@4 _FMUSIC_GetPattern@4 _FMUSIC_GetPatternLength@8 _FMUSIC_GetPaused@4 _FMUSIC_GetRealChannel@8 _FMUSIC_GetRow@4 _FMUSIC_GetSample@8 _FMUSIC_GetSpeed@4 _FMUSIC_GetTime@4 _FMUSIC_GetType@4 _FMUSIC_GetUserData@4 _FMUSIC_IsFinished@4 _FMUSIC_IsPlaying@4 _FMUSIC_LoadSong@4 _FMUSIC_LoadSongEx@24 _FMUSIC_OptimizeChannels@12 _FMUSIC_PlaySong@4 _FMUSIC_SetInstCallback@12 _FMUSIC_SetLooping@8 _FMUSIC_SetMasterSpeed@8 _FMUSIC_SetMasterVolume@8 _FMUSIC_SetOrder@8 _FMUSIC_SetOrderCallback@12 _FMUSIC_SetPanSeperation@8 _FMUSIC_SetPaused@8 _FMUSIC_SetReverb@4 _FMUSIC_SetRowCallback@12 _FMUSIC_SetSample@12 _FMUSIC_SetUserData@8 _FMUSIC_SetZxxCallback@8 _FMUSIC_StopAllSongs@0 _FMUSIC_StopSong@4 _FSOUND_3D_GetAttributes@12 _FSOUND_3D_GetMinMaxDistance@12 _FSOUND_3D_Listener_GetAttributes@32 _FSOUND_3D_Listener_SetAttributes@32 _FSOUND_3D_Listener_SetCurrent@8 _FSOUND_3D_SetAttributes@12 _FSOUND_3D_SetDistanceFactor@4 _FSOUND_3D_SetDopplerFactor@4 _FSOUND_3D_SetMinMaxDistance@12 _FSOUND_3D_SetRolloffFactor@4 _FSOUND_CD_Eject@4 _FSOUND_CD_GetNumTracks@4 _FSOUND_CD_GetPaused@4 _FSOUND_CD_GetTrack@4 _FSOUND_CD_GetTrackLength@8 _FSOUND_CD_GetTrackTime@4 _FSOUND_CD_GetVolume@4 _FSOUND_CD_OpenTray@8 _FSOUND_CD_Play@8 _FSOUND_CD_SetPaused@8 _FSOUND_CD_SetPlayMode@8 _FSOUND_CD_SetTrackTime@8 _FSOUND_CD_SetVolume@8 _FSOUND_CD_Stop@4 _FSOUND_Close@0 _FSOUND_DSP_ClearMixBuffer@0 _FSOUND_DSP_Create@12 _FSOUND_DSP_Free@4 _FSOUND_DSP_GetActive@4 _FSOUND_DSP_GetBufferLength@0 _FSOUND_DSP_GetBufferLengthTotal@0 _FSOUND_DSP_GetClearUnit@0 _FSOUND_DSP_GetClipAndCopyUnit@0 _FSOUND_DSP_GetFFTUnit@0 _FSOUND_DSP_GetMusicUnit@0 _FSOUND_DSP_GetPriority@4 _FSOUND_DSP_GetSFXUnit@0 _FSOUND_DSP_GetSpectrum@0 _FSOUND_DSP_MixBuffers@28 _FSOUND_DSP_SetActive@8 _FSOUND_DSP_SetPriority@8 _FSOUND_FX_Disable@4 _FSOUND_FX_Enable@8 _FSOUND_FX_SetChorus@32 _FSOUND_FX_SetCompressor@28 _FSOUND_FX_SetDistortion@24 _FSOUND_FX_SetEcho@24 _FSOUND_FX_SetFlanger@32 _FSOUND_FX_SetGargle@12 _FSOUND_FX_SetI3DL2Reverb@52 _FSOUND_FX_SetParamEQ@16 _FSOUND_FX_SetWavesReverb@20 _FSOUND_File_SetCallbacks@20 _FSOUND_GetAmplitude@4 _FSOUND_GetCPUUsage@0 _FSOUND_GetChannelsPlaying@0 _FSOUND_GetCurrentLevels@12 _FSOUND_GetCurrentPosition@4 _FSOUND_GetCurrentSample@4 _FSOUND_GetDriver@0 _FSOUND_GetDriverCaps@8 _FSOUND_GetDriverName@4 _FSOUND_GetError@0 _FSOUND_GetFrequency@4 _FSOUND_GetLoopMode@4 _FSOUND_GetMaxChannels@0 _FSOUND_GetMaxSamples@0 _FSOUND_GetMemoryStats@8 _FSOUND_GetMixer@0 _FSOUND_GetMute@4 _FSOUND_GetNumDrivers@0 _FSOUND_GetNumHWChannels@12 _FSOUND_GetNumHardwareChannels@0 _FSOUND_GetNumSubChannels@4 _FSOUND_GetOutput@0 _FSOUND_GetOutputHandle@0 _FSOUND_GetOutputRate@0 _FSOUND_GetPan@4 _FSOUND_GetPaused@4 _FSOUND_GetPriority@4 _FSOUND_GetReserved@4 _FSOUND_GetSFXMasterVolume@0 _FSOUND_GetSubChannel@8 _FSOUND_GetSurround@4 _FSOUND_GetVersion@0 _FSOUND_GetVolume@4 _FSOUND_Init@12 _FSOUND_IsPlaying@4 _FSOUND_PlaySound@8 _FSOUND_PlaySoundEx@16 _FSOUND_Record_GetDriver@0 _FSOUND_Record_GetDriverName@4 _FSOUND_Record_GetNumDrivers@0 _FSOUND_Record_GetPosition@0 _FSOUND_Record_SetDriver@4 _FSOUND_Record_StartSample@8 _FSOUND_Record_Stop@0 _FSOUND_Reverb_GetChannelProperties@8 _FSOUND_Reverb_GetProperties@4 _FSOUND_Reverb_SetChannelProperties@8 _FSOUND_Reverb_SetProperties@4 _FSOUND_Sample_Alloc@28 _FSOUND_Sample_Free@4 _FSOUND_Sample_Get@4 _FSOUND_Sample_GetDefaults@20 _FSOUND_Sample_GetDefaultsEx@32 _FSOUND_Sample_GetLength@4 _FSOUND_Sample_GetLoopPoints@12 _FSOUND_Sample_GetMinMaxDistance@12 _FSOUND_Sample_GetMode@4 _FSOUND_Sample_GetName@4 _FSOUND_Sample_Load@20 _FSOUND_Sample_Lock@28 _FSOUND_Sample_SetDefaults@20 _FSOUND_Sample_SetDefaultsEx@32 _FSOUND_Sample_SetLoopPoints@12 _FSOUND_Sample_SetMaxPlaybacks@8 _FSOUND_Sample_SetMinMaxDistance@12 _FSOUND_Sample_SetMode@8 _FSOUND_Sample_Unlock@20 _FSOUND_Sample_Upload@12 _FSOUND_SetBufferSize@4 _FSOUND_SetCurrentPosition@8 _FSOUND_SetDriver@4 _FSOUND_SetFrequency@8 _FSOUND_SetFrequencyEx@8 _FSOUND_SetHWND@4 _FSOUND_SetLoopMode@8 _FSOUND_SetMaxHardwareChannels@4 _FSOUND_SetMemorySystem@20 _FSOUND_SetMinHardwareChannels@4 _FSOUND_SetMixer@4 _FSOUND_SetMute@8 _FSOUND_SetOutput@4 _FSOUND_SetPan@8 _FSOUND_SetPanSeperation@4 _FSOUND_SetPaused@8 _FSOUND_SetPriority@8 _FSOUND_SetReserved@8 _FSOUND_SetSFXMasterVolume@4 _FSOUND_SetSpeakerMode@4 _FSOUND_SetSurround@8 _FSOUND_SetVolume@8 _FSOUND_SetVolumeAbsolute@8 _FSOUND_StopSound@4 _FSOUND_Stream_AddSyncPoint@12 _FSOUND_Stream_Close@4 _FSOUND_Stream_Create@20 _FSOUND_Stream_CreateDSP@16 _FSOUND_Stream_DeleteSyncPoint@4 _FSOUND_Stream_FindTagField@20 _FSOUND_Stream_GetLength@4 _FSOUND_Stream_GetLengthMs@4 _FSOUND_Stream_GetMode@4 _FSOUND_Stream_GetNumSubStreams@4 _FSOUND_Stream_GetNumSyncPoints@4 _FSOUND_Stream_GetNumTagFields@8 _FSOUND_Stream_GetOpenState@4 _FSOUND_Stream_GetPosition@4 _FSOUND_Stream_GetSample@4 _FSOUND_Stream_GetSyncPoint@8 _FSOUND_Stream_GetSyncPointInfo@8 _FSOUND_Stream_GetTagField@24 _FSOUND_Stream_GetTime@4 _FSOUND_Stream_Net_GetBufferProperties@12 _FSOUND_Stream_Net_GetLastServerStatus@0 _FSOUND_Stream_Net_GetStatus@20 _FSOUND_Stream_Net_SetBufferProperties@12 _FSOUND_Stream_Net_SetMetadataCallback@12 _FSOUND_Stream_Net_SetNetDataCallback@8 _FSOUND_Stream_Net_SetProxy@4 _FSOUND_Stream_Open@16 _FSOUND_Stream_Play@8 _FSOUND_Stream_PlayEx@16 _FSOUND_Stream_SetBufferSize@4 _FSOUND_Stream_SetEndCallback@12 _FSOUND_Stream_SetLoopCount@8 _FSOUND_Stream_SetLoopPoints@12 _FSOUND_Stream_SetMode@8 _FSOUND_Stream_SetPCM@8 _FSOUND_Stream_SetPosition@8 _FSOUND_Stream_SetSubStream@8 _FSOUND_Stream_SetSubStreamSentence@12 _FSOUND_Stream_SetSyncCallback@12 _FSOUND_Stream_SetTime@8 _FSOUND_Stream_Stop@4 _FSOUND_Update@0

gfx2d.dll

IMPHASH d910d8e1d80183825148367a41a7e054
SHA256 d571db41d3c174a67ad91b69f0c5bbfb876104d90c54853bc47a1b905a08131e
MD5 d36484cb65719dd28956e22cfeceffd0
SHA1 33e0415d36c3b291996e3cf7665a726b40e98672
SHA512 282558b585d28609aca9a592c4495c4d8e19a788a3a65818561304941eea569a287de0df9084fa1ac3b38490bfcc157cc5bc18d75c525f1c99c630ec97eab111
SSDEEP 3072:ud/LpNYDAhhhCvTBQPf8OFKnxkQhw2oqWpr9ZQ/o72OJW6sHq/FG:OTcTj5ydT3c
TLSH
T19CB37D0A795B21A4E21152BCDD547A7BF83FA9F179886F875B38D9304036520BB3323B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

72679

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

core

?touchMemory@MemoryMgr@@QAEXXZ ?MessagePump@Platform@@YAHXZ ?GetActive@Platform@@YA_NXZ ?GetMinimized@Platform@@YA_NXZ ?DestructWindow@Platform@@YAXPAUHWND__@@@Z ?GetWindowHeight@Platform@@YAHXZ ?GetWindowWidth@Platform@@YAHXZ ?free@MemoryMgr@@QAEHHPAX@Z ?GetInt@Parser@@QAE_NPAH@Z ?mt_rand@@YAIXZ ?GetEqualsToken@Parser@@QAE_NXZ ?GetFloat2@Parser@@QAE_NPAM0@Z ?GetFloat@Parser@@QAE_NPAM@Z ?GetToken@Parser@@QAEPADPAD@Z ?ParseLine@Parser@@QAE_NXZ ??0Parser@@QAE@PAD@Z ?ParseString@Parser@@QAE_NPAD@Z ?ParseInteger@Parser@@QAE_NPAH@Z ??1Parser@@UAE@XZ ?ParseInteger2@Parser@@QAE_NPAH0@Z ?ParseUTF8@Parser@@QAE_NPAE@Z ?ParseInteger3@Parser@@QAE_NPAH00@Z ?alloc@MemoryMgr@@QAEPAXHIPBDI@Z ?g_MemoryPtr@@3PAVMemoryMgr@@A

imglib

??1Image@@UAE@XZ ?allocateData@Image@@QAEHHHH@Z ?_flipImage@Image@@IAEHXZ ?saveToJpeg@Image@@QAEHPBDI@Z ??0Image@@QAE@XZ ?loadImage@Image@@QAEHPBD@Z ?getAlphaMask@Image@@QAEPAEH@Z ?getAlphaMaskWidth@Image@@QBEHXZ ?getAlphaMaskHeight@Image@@QBEHXZ

logger

?log@udLogger@@SAXHPBDZZ

file

?open@File@@YAPAU_MjzFileType_s@@PBD0@Z ?getLength@File@@YAHPAU_MjzFileType_s@@@Z ?read@File@@YAIPAXIIPAU_MjzFileType_s@@@Z ?close@File@@YAHPAU_MjzFileType_s@@@Z

msvcrt

__CxxFrameHandler strncpy _purecall ?terminate@@YAXXZ free _ftol malloc _adjust_fdiv tolower strncat strncmp sscanf fprintf sprintf _initterm _stricmp _except_handler3

kernel32

DisableThreadLibraryCalls WritePrivateProfileStringA GetPrivateProfileIntA EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection

??0gfxBitmap@@QAE@XZ ??0gfxFont@@QAE@ABV0@@Z ??0gfxFont@@QAE@XZ ??0gfxPalette@@QAE@ABV0@@Z ??0gfxPalette@@QAE@XZ ??0gfxParticleSystem@@QAE@XZ ??0gfxRenderer@@QAE@ABV0@@Z ??0gfxRenderer@@QAE@XZ ??0gfxSprite@@QAE@ABV0@@Z ??0gfxSprite@@QAE@XZ ??0gfxSubsystem@@QAE@PAVgfxRenderer@@@Z ??1gfxBitmap@@UAE@XZ ??1gfxFont@@UAE@XZ ??1gfxPalette@@UAE@XZ ??1gfxParticleSystem@@UAE@XZ ??1gfxRenderer@@UAE@XZ ??1gfxSprite@@UAE@XZ ??1gfxSubsystem@@UAE@XZ ??4gfxFont@@QAEAAV0@ABV0@@Z ??4gfxPalette@@QAEAAV0@ABV0@@Z ??4gfxRenderer@@QAEAAV0@ABV0@@Z ??4gfxSprite@@QAEAAV0@ABV0@@Z ??_7gfxFont@@6B@ ??_7gfxPalette@@6B@ ??_7gfxRenderer@@6B@ ??_7gfxSprite@@6B@ ?_getChar@gfxFont@@IAEPAUFontChar_s@@HI@Z ?_parseFont@gfxFont@@IAEHPAPAD@Z ?_parseSprite@gfxSprite@@IAEHPAPAD@Z ?_testImageDimensions@gfxBitmap@@IAEXHH@Z ?activate@gfxFont@@UAEHPAVgfxBitmapFactory@@@Z ?activate@gfxSprite@@UAEHPAVgfxBitmapFactory@@@Z ?activate@gfxSubsystem@@UAEXXZ ?addEvent@gfxSubsystem@@QAEXHHHHMPAX@Z ?alphaTest@gfxBitmap@@UAE_NHHHHHH@Z ?alphaTest@gfxSprite@@UAE_NHHHH@Z ?alphaTestSprite@gfxSubsystem@@QAE_NHHHHH@Z ?blt@gfxSprite@@UAEXHHHHHHHHQAEE@Z ?blt@gfxSprite@@UAEXHHHHHHQAEE@Z ?blt@gfxSprite@@UAEXHHHHQAEE@Z ?blt@gfxSubsystem@@QAEXHHHHHHE@Z ?blt@gfxSubsystem@@QAEXHHHHHHHHE@Z ?blt@gfxSubsystem@@QAEXHHHHHHHHHHE@Z ?bltPsys@gfxParticleSystemInstance@@QAEHM@Z ?bltSort@gfxSubsystem@@QAEXHHHHHHHE@Z ?bltText@gfxFont@@UAEHHHHHHEPBI@Z ?bltXFormFloat@gfxBitmap@@UAEXMMHHHHQAEEMM@Z ?bltx@gfxSprite@@UAEXHHHHQAEEMM@Z ?bltx@gfxSubsystem@@QAEXHHHHHHHQAEEM_NM1@Z ?bltx_f@gfxSprite@@UAEXMMHHQAEEMM@Z ?bltx_f@gfxSubsystem@@QAEXHHHMMHHQAEEM_NM1@Z ?clone@gfxBitmap@@UAEXPAV1@@Z ?createFont@gfxSubsystem@@QAEHPBD@Z ?createPalette@gfxSubsystem@@QAEHPBD@Z ?createParticleSystem@gfxSubsystem@@QAEHPBD@Z ?createParticleSystemInstance@gfxSubsystem@@QAEHPBD0@Z ?createParticleSystemInstance@gfxSubsystem@@QAEHPBDHP6AXPAXW4e_ParticleEvents@@PAVgfxParticleSystemInstance@@H@Z1@Z ?createSpline@gfxSubsystem@@QAEHPBD@Z ?createSprite@gfxSubsystem@@QAEHPBD@Z ?deactivate@gfxFont@@UAEXPAVgfxBitmapFactory@@@Z ?deactivate@gfxSprite@@UAEXPAVgfxBitmapFactory@@@Z ?deactivate@gfxSubsystem@@UAEXXZ ?defineDepthNode@gfxSubsystem@@QAEXPBDI@Z ?displayChanged@gfxSubsystem@@QAEXPAUHWND__@@HHH@Z ?g_blackColor@@3PAEA ?g_blueColor@@3PAEA ?g_cyanColor@@3PAEA ?g_gfx@@3PAVgfxSubsystem@@A ?g_greenColor@@3PAEA ?g_magentaColor@@3PAEA ?g_redColor@@3PAEA ?g_whiteColor@@3PAEA ?g_yellowColor@@3PAEA ?garbageCollect@gfxSubsystem@@QAEXXZ ?getAnimCount@gfxSprite@@UBEHXZ ?getApproxCurrentMemory@gfxRenderer@@UBEIXZ ?getApproxTotalMemory@gfxRenderer@@UBEIXZ ?getCharDimensions@gfxFont@@UAE_NHIPAH0@Z ?getCharDimensions@gfxSubsystem@@QBE_NHHIPAH0@Z ?getColor_RGB@gfxPalette@@QAEXMQAE@Z ?getEmitterCount@gfxParticleSystem@@QBEEXZ ?getEmitterData@gfxParticleSystem@@QAEPBU_EmitterData_s@@H@Z ?getEmitterId@gfxParticleSystem@@QAEHPBD@Z ?getEmitterName@gfxParticleSystem@@QAEPBDH@Z ?getEntryCount@gfxPalette@@QBEHXZ ?getFontDimensions@gfxFont@@UAEXPAH0@Z ?getFontDimensions@gfxSubsystem@@QBEXHPAH0@Z ?getFontHeight@gfxSubsystem@@QBEHH@Z ?getFrameCount@gfxSprite@@UBEHH@Z ?getFullscreen@gfxSubsystem@@QBE_NXZ ?getFullscreen@gfxSubsystem@@UAE_NXZ ?getGraphicsDetail@gfxSubsystem@@UAEHXZ ?getHeight@gfxSprite@@UBEHXZ ?getMaxDepthNode@gfxSubsystem@@QBEHXZ ?getParticleSystem@gfxParticleSystemInstance@@QBEPBVgfxParticleSystem@@XZ ?getParticleSystemInstance@gfxSubsystem@@QAEPBVgfxParticleSystemInstance@@H@Z ?getRenderStats@gfxSubsystem@@QAEPBU_GfxStats_s@@XZ ?getScreenHeight@gfxSubsystem@@QBEHXZ ?getScreenWidth@gfxSubsystem@@QBEHXZ ?getSpriteAnimCount@gfxSubsystem@@QBEHH@Z ?getSpriteFrameCount@gfxSubsystem@@QBEHHH@Z ?getSpriteHeight@gfxSubsystem@@QBEHH@Z ?getSpriteName@gfxSprite@@UBEPBDXZ ?getSpriteName@gfxSubsystem@@QAEPBDH@Z ?getSpriteWidth@gfxSubsystem@@QBEHH@Z ?getTextRect@gfxFont@@UAEXHHHPBIPAH111@Z ?getTextRect@gfxSubsystem@@QAEXHHHHPBIPAH111@Z ?getWidth@gfxSprite@@UBEHXZ ?init@gfxParticleSystemInstance@@QAEHPAVgfxParticleSystem@@PAVgfxSpriteFactory@@PAVgfxPaletteFactory@@PAVgfxSplineFactory@@P6AXPAXW4e_ParticleEvents@@PAV1@H@Z4@Z ?initialize@gfxSubsystem@@UAEHPAVPreferences@@PAUHWND__@@@Z ?isDead@gfxParticleSystemInstance@@QAE_NXZ ?isHardwareAccelerated@gfxSubsystem@@QBE_NXZ ?line@gfxSubsystem@@QAEXHHHHHMQBE@Z ?line_f@gfxSubsystem@@QAEXHMMMMMQBE@Z ?load@gfxFont@@UAEHPBD@Z ?load@gfxPalette@@UAEHPAVImage@@PBD@Z ?load@gfxParticleSystem@@QAEHPBD@Z ?load@gfxSprite@@UAEHPBD@Z ?moveWindow@gfxSubsystem@@QAEXXZ ?offsetParticles@gfxParticleSystemInstance@@QAEXHH@Z ?particleSystemInstanceIsDead@gfxSubsystem@@QAE_NH@Z ?particleSystemInstanceOffsetParticles@gfxSubsystem@@QAEXHHH@Z ?particleSystemInstanceStartEmitters@gfxSubsystem@@QAEXH@Z ?particleSystemInstanceStopEmitters@gfxSubsystem@@QAEXH@Z ?point@gfxSubsystem@@QAEXHHHMQBE@Z ?print@gfxSubsystem@@QAEXHHHHHHHEPBD@Z ?print@gfxSubsystem@@QAEXHHHHHHHEPBI@Z ?psemit@gfxSubsystem@@QAEXHHM@Z ?registerThread@gfxRenderer@@UAEXPBD@Z ?registerThread@gfxSubsystem@@QAEXPBD@Z ?reinitialize@gfxBitmapFactory@@QAEHXZ ?releasePalette@gfxSubsystem@@QAEXPBD@Z ?releaseParticleSystem@gfxSubsystem@@QAEXPBD@Z ?releaseParticleSystemInstance@gfxSubsystem@@QAEXH@Z ?releaseParticleSystemInstance@gfxSubsystem@@QAEXPBD0@Z ?releaseParticleSystemInstance@gfxSubsystem@@QAEXPBD@Z ?releaseSpline@gfxSubsystem@@QAEXPBD@Z ?releaseSprite@gfxSubsystem@@QAEXPBD@Z ?reset@gfxBitmap@@UAEXXZ ?reset@gfxPalette@@QAEXXZ ?reset@gfxParticleSystem@@QAEXXZ ?reset@gfxParticleSystemInstance@@QAEXXZ ?reset@gfxSprite@@UAEXXZ ?resetBitmaps@gfxBitmapFactory@@QAEHXZ ?resetParticleSystemInstance@gfxSubsystem@@QAEXH@Z ?setClearColor@gfxSubsystem@@QAEXQBE@Z ?setFullscreen@gfxSubsystem@@UAE_N_N@Z ?setGraphicsDetail@gfxSubsystem@@UAEHH@Z ?setupAlphaTest@gfxBitmap@@UAEXXZ ?setupAlphaTest@gfxSprite@@UAEXXZ ?setupAlphaTestSprite@gfxSubsystem@@QAEXH@Z ?showSpline@gfxParticleSystemInstance@@QAEXH_N@Z ?shutdown@gfxSubsystem@@UAEHXZ ?startEmitters@gfxParticleSystemInstance@@QAEXXZ ?stopEmitters@gfxParticleSystemInstance@@QAEXXZ ?suspend@gfxRenderer@@UAEX_N@Z ?suspendRenderer@gfxRenderer@@UAEX_N@Z ?suspendRenderer@gfxSubsystem@@QAEX_N@Z ?takeScreenshot@gfxSubsystem@@QAEXPBD@Z ?unregisterThread@gfxRenderer@@UAEXPBD@Z ?unregisterThread@gfxSubsystem@@QAEXPBD@Z ?update@gfxParticleSystemInstance@@QAEXMHHPAVgfxSpriteFactory@@PAVgfxPaletteFactory@@PAVgfxSplineFactory@@@Z ?update@gfxSubsystem@@QAEHI@Z ?updateBitmap@gfxFont@@UAEXPAVgfxBitmapFactory@@@Z ?updateBitmap@gfxSprite@@UAEXPAVgfxBitmapFactory@@@Z ?updateParticleSystem@gfxSubsystem@@QAEXHHHM@Z ?validBlt@gfxSprite@@QAE_NHH@Z

gfx2d_dd7.dll

IMPHASH 9322edf8b70ce4b8df21a3c82244e419
SHA256 0bd1e468018b8261f38e114f5976ec84033a755adc55463f1c108edae8601a56
MD5 ea990e17b826722eabe0a0632ab9d026
SHA1 95a518a80dab6e5eaa1f84f930e0e62e39cab63b
SHA512 2f93ac4dc7ee0aeaf05e67f743ffc64e001d6b294a33420118154d56865b764092c8a3a424d4b4611937a6406c2d5f6dfad23ab22b6102713022c83af5fa4379
SSDEEP 768:8hH0pyctUuB+/x92iaG/gSOJ6yEA/SmodU7qZ6mheGz7v4AZCTLNYzO:81o+kdJ6oGv0TqK
TLSH
T146533A10678225E6D247BB70743E177B8F77487800EC87CDAB2AEBE97466134933E642
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

30571

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

user32

ClientToScreen ShowWindow GetClientRect

core

?SetFullscreenWindow@Platform@@YAXPAUHWND__@@_NHH@Z ?free@MemoryMgr@@QAEHHPAX@Z ?g_MemoryPtr@@3PAVMemoryMgr@@A ?alloc@MemoryMgr@@QAEPAXHIPBDI@Z ?SetWindowPos@Platform@@YAXXZ ?MessagePump@Platform@@YAHXZ ?g_CPUInfo@@3UCPUInfo_s@@A ?GetTime@Platform@@YAIXZ ?SetVideoInfo@Platform@@YAXHHH_N@Z ?GetWindowHeight@Platform@@YAHXZ ?GetWindowWidth@Platform@@YAHXZ ?GetDesktopInfo@Platform@@YAXAAH00@Z

logger

?log@udLogger@@SAXHPBDZZ

ddraw

DirectDrawEnumerateExA DirectDrawCreateEx

imglib

?copyTo16Bit@Image@@QAEXPAEIGGG@Z ?loadImage@Image@@QAEHPBD@Z ?copyTo32Bit@Image@@QAEXPAEI@Z ?convertToD3DByteOrdering@Image@@QAEHXZ ?copyTo24Bit@Image@@QAEXPAEI@Z

gfx2d

?alphaTest@gfxBitmap@@UAE_NHHHHHH@Z ?setupAlphaTest@gfxBitmap@@UAEXXZ ?clone@gfxBitmap@@UAEXPAV1@@Z ?bltXFormFloat@gfxBitmap@@UAEXMMHHHHQAEEMM@Z ??1gfxBitmap@@UAE@XZ ?reset@gfxBitmap@@UAEXXZ ?_testImageDimensions@gfxBitmap@@IAEXHH@Z ?unregisterThread@gfxRenderer@@UAEXPBD@Z ??1gfxRenderer@@UAE@XZ ?resetBitmaps@gfxBitmapFactory@@QAEHXZ ??0gfxSubsystem@@QAE@PAVgfxRenderer@@@Z ??_7gfxRenderer@@6B@ ?registerThread@gfxRenderer@@UAEXPBD@Z ?suspend@gfxRenderer@@UAEX_N@Z ?suspendRenderer@gfxRenderer@@UAEX_N@Z ?getApproxTotalMemory@gfxRenderer@@UBEIXZ ?getApproxCurrentMemory@gfxRenderer@@UBEIXZ ??0gfxBitmap@@QAE@XZ ??0gfxRenderer@@QAE@XZ

msvcrt

_adjust_fdiv malloc _initterm free ?terminate@@YAXXZ _except_handler3 sprintf strncpy __CxxFrameHandler _purecall

kernel32

DisableThreadLibraryCalls WritePrivateProfileStringA GetPrivateProfileIntA

??0gfxDirectDraw7@@QAE@ABV0@@Z ??0gfxDirectDraw7@@QAE@XZ ??0gfxRendererDD7@@QAE@ABV0@@Z ??0gfxRendererDD7@@QAE@XZ ??1gfxDirectDraw7@@UAE@XZ ??1gfxRendererDD7@@UAE@XZ ??4gfxDirectDraw7@@QAEAAV0@ABV0@@Z ??4gfxRendererDD7@@QAEAAV0@ABV0@@Z ??_7gfxDirectDraw7@@6B@ ??_7gfxRendererDD7@@6BgfxDirectDraw7@@@ ??_7gfxRendererDD7@@6BgfxRenderer@@@ ?_backbuffer@gfxDirectDraw7@@1PAUIDirectDrawSurface7@@A ?_backbufferPitch@gfxDirectDraw7@@1IA ?_bitsPerPixel@gfxDirectDraw7@@1HA ?_bluBitMask@gfxDirectDraw7@@1IA ?_bluBits@gfxDirectDraw7@@1HA ?_bluShift@gfxDirectDraw7@@1HA ?_chooseMode@gfxRendererDD7@@IAE_NXZ ?_clipper@gfxDirectDraw7@@1PAUIDirectDrawClipper@@A ?_coopFlags@gfxDirectDraw7@@1HA ?_ddraw@gfxDirectDraw7@@1PAUIDirectDraw7@@A ?_displayModeCount@gfxDirectDraw7@@1IA ?_displayModes@gfxDirectDraw7@@1PAU_displayModeInfo_s@@A ?_driverCaps@gfxDirectDraw7@@1U_DDCAPS_DX7@@A ?_grnBitMask@gfxDirectDraw7@@1IA ?_grnBits@gfxDirectDraw7@@1HA ?_grnShift@gfxDirectDraw7@@1HA ?_helCaps@gfxDirectDraw7@@1U_DDCAPS_DX7@@A ?_modeSwitch@gfxRendererDD7@@IAEHPAUHWND__@@@Z ?_monitorCount@gfxDirectDraw7@@1IA ?_monitors@gfxDirectDraw7@@1PAU_monitorInfo_s@@A ?_primary@gfxDirectDraw7@@1PAUIDirectDrawSurface7@@A ?_primaryBack@gfxDirectDraw7@@1PAUIDirectDrawSurface7@@A ?_redBitMask@gfxDirectDraw7@@1IA ?_redBits@gfxDirectDraw7@@1HA ?_redShift@gfxDirectDraw7@@1HA ?_reportError@gfxDirectDraw7@@KAHHPBD@Z ?_sysSurfaceMemory@gfxDirectDraw7@@1IA ?_testFullscreenSwitch@gfxRendererDD7@@IAEHXZ ?_testMode@gfxRendererDD7@@IAE_NHHH_N@Z ?_winHeight@gfxDirectDraw7@@1IA ?_winWidth@gfxDirectDraw7@@1IA ?_wndRect@gfxDirectDraw7@@1UtagRECT@@A ?beginFrame@gfxRendererDD7@@UAEXXZ ?clearFrame@gfxRendererDD7@@UAEXQAE@Z ?createBitmap@gfxRendererDD7@@UAEPAVgfxBitmap@@XZ ?displayChanged@gfxRendererDD7@@UAE_NPAUHWND__@@HHH@Z ?drawLine@gfxRendererDD7@@UAEXMMMMMQBE@Z ?drawPoint@gfxRendererDD7@@UAEXHHMQBE@Z ?endFrame@gfxRendererDD7@@UAEXXZ ?extDisplayChanged@gfxRendererDD7@@UAE_NPAVgfxBitmapFactory@@@Z ?getScreen@gfxRendererDD7@@UAEXPAE@Z ?initialize@gfxRendererDD7@@UAEHPAVgfxPreferences@@PAUHWND__@@@Z ?isHWRenderer@gfxRendererDD7@@UBE_NXZ ?moveWindow@gfxRendererDD7@@UAEXPAUHWND__@@@Z ?renderFrame@gfxRendererDD7@@UAEHXZ ?s_adjustFlippingRect@gfxDirectDraw7@@SAXPAUHWND__@@@Z ?s_createClipper@gfxDirectDraw7@@SA_NPAUHWND__@@@Z ?s_createDirectDraw7@gfxDirectDraw7@@SA_NI@Z ?s_createFlippingSurfaces@gfxDirectDraw7@@SA_NPAUHWND__@@H@Z ?s_createPrimarySurface@gfxDirectDraw7@@SA_NXZ ?s_createPrimaryWithBackbuffers@gfxDirectDraw7@@SA_NH@Z ?s_createSurface@gfxDirectDraw7@@SAPAUIDirectDrawSurface7@@HH_N@Z ?s_enumDirectDrawEnumCb@gfxDirectDraw7@@KGHPAU_GUID@@PAD1PAXPAUHMONITOR__@@@Z ?s_enumDirectDrawEnumCountCb@gfxDirectDraw7@@KGHPAU_GUID@@PAD1PAXPAUHMONITOR__@@@Z ?s_enumDisplayModes@gfxDirectDraw7@@SA_NXZ ?s_enumDisplayModesCb@gfxDirectDraw7@@KGJPAU_DDSURFACEDESC2@@PAX@Z ?s_enumDisplayModesCountCb@gfxDirectDraw7@@KGJPAU_DDSURFACEDESC2@@PAX@Z ?s_enumMonitors@gfxDirectDraw7@@SA_NXZ ?s_flipBackbuffer@gfxDirectDraw7@@SA_NXZ ?s_fullscreenShutdown@gfxDirectDraw7@@SA_NXZ ?s_getCaps@gfxDirectDraw7@@SA_NXZ ?s_getCount@gfxDirectDraw7@@SAHPAUIUnknown@@@Z ?s_queryPixelFormat@gfxDirectDraw7@@SA_NXZ ?s_restoreDisplayMode@gfxDirectDraw7@@SA_NXZ ?s_setCooperativeLevel@gfxDirectDraw7@@SA_NPAUHWND__@@_N@Z ?s_setDisplayMode@gfxDirectDraw7@@SA_NHHH@Z ?s_terminate@gfxDirectDraw7@@SA_NXZ ?s_testMode@gfxDirectDraw7@@SA_NHHH@Z ?setFullscreen@gfxRendererDD7@@UAEHPAUHWND__@@PAVgfxBitmapFactory@@@Z ?shutdown@gfxRendererDD7@@UAEHXZ CreateGfxSubsystem

gfx2d_dx8.dll

IMPHASH 04314a9e23ce9522f8c347d2f022de91
SHA256 21f8e46a5e21c38f75dba7051b4886df8df79985265057a93211290b166f9c43
MD5 49469eb567d3ee916f13bb9921253cdb
SHA1 170b87f907adbe47f9f4a2cda6238701da2a32f7
SHA512 c469b36b2d4f8b0a8329ff9c39a3c0f5fbaab803c2e4595814a5af5a31a1138d6f0bac54966d10ba03eb2528da9af8e953b8676d1c0757a213543efba18d4ac5
SSDEEP 384:m8eXo95Xx4Ec2AqQ0a+UpMlhnduw4IEErj5mGreYuRf:rXxBc2A30avOhW+5mGri
TLSH
T113F24B02664376F1E71325703859BF37EFAC06E52254EF69D727DAE15867022B23BA03
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

17707

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

gfx2d_ogl.dll

IMPHASH d34c8c9b71f0fe4eae9c39865206b0dc
SHA256 c014f6a2b67d05a8de3d1beb53c12880fd8d7ab738837613f788cff3ee339709
MD5 b6c2c6668df8fc75f84dd8c2221396c7
SHA1 cda97813a240a58aca8f9d5028f2519517bdc500
SHA512 0142a1f9fd48114ee39768520e3ed9532872c81051f4a25bff38828f6ae5aee477b6bb6bbdf3cbf891fe9281d7df38ca54e7e360202bfe1aed5b0aa25cb8b515
SSDEEP 384:fGKyR4lSXE9+eNP1p5/gEhprtoCYS4Tssggn8qOJeiu4a58HLHfEBW4TN5r5GVLC:xyR49+ar5/gEXrtH5g8qOo8HLHftVWh
TLSH
T1A3D26D43CE1639F6D104603078A977336F217DA612E681179BA3DD76EC3A233B329396
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

14193

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

opengl32

glShadeModel glFrontFace glClear glClearColor glLineWidth glColor4ubv glPointSize glReadPixels glGetString glGetIntegerv wglShareLists wglCreateContext wglMakeCurrent wglDeleteContext wglSwapBuffers glFlush glViewport glMatrixMode glLoadIdentity glOrtho glTexSubImage2D glTexImage2D glTexParameteri glBindTexture glGenTextures glEnd glVertex2i glTexCoord2f glBegin glPopMatrix glVertex2f glPixelStorei glGetError glScalef glRotatef glTranslatef glPushMatrix glColor4ub glDisable glBlendFunc glEnable glDeleteTextures

gdi32

ChoosePixelFormat DescribePixelFormat SetPixelFormat

user32

ShowWindow ChangeDisplaySettingsA SetWindowLongA SetWindowPos AdjustWindowRect ReleaseDC GetDC DefWindowProcA EnumDisplaySettingsA ChangeDisplaySettingsExA

ddraw

DirectDrawEnumerateExA

core

?MessagePump@Platform@@YAHXZ ?GetDesktopInfo@Platform@@YAXAAH00@Z ?GetWindowPos@Platform@@YAXAAH0@Z ?SetVideoInfo@Platform@@YAXHHH_N@Z ?free@MemoryMgr@@QAEHHPAX@Z ?g_MemoryPtr@@3PAVMemoryMgr@@A ?alloc@MemoryMgr@@QAEPAXHIPBDI@Z ?DestructWindow@Platform@@YAXPAUHWND__@@@Z ?InitWindow@Platform@@YAPAUHWND__@@PAUHINSTANCE__@@PAU2@PBDPAUHICON__@@3HHHH_N4P6GJ1IIJ@Z@Z ?GetApp@Platform@@YAPAUHINSTANCE__@@XZ ?GetWindowWidth@Platform@@YAHXZ ?SetWindowPos@Platform@@YAXXZ ?GetWindowHeight@Platform@@YAHXZ

logger

?log@udLogger@@SAXHPBDZZ ?LogLastError@@YAXXZ

imglib

?promoteToTexture@Image@@QAEHPAV1@PBD1@Z

gfx2d

??1gfxRenderer@@UAE@XZ ??0gfxRenderer@@QAE@XZ ?unregisterThread@gfxRenderer@@UAEXPBD@Z ?suspend@gfxRenderer@@UAEX_N@Z ?suspendRenderer@gfxRenderer@@UAEX_N@Z ?getApproxTotalMemory@gfxRenderer@@UBEIXZ ?getApproxCurrentMemory@gfxRenderer@@UBEIXZ ?clone@gfxBitmap@@UAEXPAV1@@Z ?_testImageDimensions@gfxBitmap@@IAEXHH@Z ?reset@gfxBitmap@@UAEXXZ ??1gfxBitmap@@UAE@XZ ??0gfxBitmap@@QAE@XZ ?setupAlphaTest@gfxBitmap@@UAEXXZ ?alphaTest@gfxBitmap@@UAE_NHHHHHH@Z ??0gfxSubsystem@@QAE@PAVgfxRenderer@@@Z ?registerThread@gfxRenderer@@UAEXPBD@Z

msvcrt

malloc _initterm free _adjust_fdiv atoi strstr _purecall strncpy __CxxFrameHandler _stricmp strtok _strlwr sprintf

kernel32

WritePrivateProfileStringA DisableThreadLibraryCalls GetPrivateProfileIntA

imglib.dll

IMPHASH 82867c343eb0d6c8e9f278e2dae3e343
SHA256 9a46b1b447ddd241651f4df924eaa1ff83338702915859984cf716d2abe4afb6
MD5 7d02c9bf2ba850341448ed094d3793a5
SHA1 f0de9225cce96ba7f9ca0c274dd37262bacdc1a2
SHA512 76aa550abdcea3757428c5bfb23e791ad14330c335a921f578b0f575ce340b56e5b0a9f467f2a22451cc5dc5eeb45f6d399482448277387d48b023bb0849f20b
SSDEEP 384:5xWWKvNXRT+uLtSRNzHA3JfH76ywAZI5eK5XxH:5zKvHT+KtS/H4JfH7sreK5X
TLSH
T15AD23B96F3EB95E2C7074D313996A233A134EA68516C87537FD9D6A39C33632383A710
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

14810

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

jpeg.dll

IMPHASH c706b027ff6bf73e17127f8f7178144d
SHA256 ded028a137b762436c4693a8a59632296cd37e2eca5500aefea585416ff969c0
MD5 a5269bd4a772b7fbf9230491304d3033
SHA1 dbb8acb189ba4d50c64581ca2aab67a32759a3c6
SHA512 497b3065a1a406481b4c26643f71d24bf5a3292056f81f9cc5caae34e04bc0c3bd1faa13da8d00b3e728ea18770e1d65c0716d212c07ef87cbec391c1b2dd2cf
SSDEEP 1536:1jxV8tZCff8E3+SEEuTxcMolDxVWdeyaHvmmPtivzxJbZIqqnV4:10tZC3LhEEUxcVeeZHvXdV4
TLSH
T176A37BC1BA8640F0D9852B70609BB7779F39174B148FDB93CB34EDA15923632FD252A8
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

79585

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

logger.dll

IMPHASH 64f28742006b6f5c2eef8825b5f1e2da
SHA256 927efee976abc7b9c37b77f1de3510443b9c1c3ebd019285d3f8a5cdaa49222e
MD5 da359b9d335e92861eeee620ad613476
SHA1 b36d9ed3902d237278784cc0204d54f2dfef6c03
SHA512 9d5a84179201766491daf74d8f9db7ee7b875937f438575e1d61b2d842f1290cccd2f8f9f19633fe4639ba34495d73357bea23291da3887d09d78341782139db
SSDEEP 384:BK8RfRO7MZEx/FpxpO6K1qBKkAUc07xgUy+VEy2CMzUL69:fO78StMO9hMzf9
TLSH
T136234E022620B8A6D195253710FFAA7A731AAD004F4D5FC7F276B96A9D392C35D37703
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

9825

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

luxor.ini

SHA256 9e38c02b5c84bb08f35f383f5fff539df7b708bdbe4f1f0c621bb8a8ff1fbe9f
MD5 50561737de7b5d57e86e81eb17ee667b
SHA1 472badce6cf9c561a83e3926b64fd4d61b1f50dd
SHA512 e59c44f68a3a134e0cbde1b55284b642d3e94a70a57b4e75c314097926bb24e72c569f91675f377cab12ce8858893d2c0780f2aaea05ed5fb3db675ba012c0e7
TLSH
T164F0D3DCE54A8D9C083FCC585FBC7CAD560141A848525BCC72C06C852E9731B27D85BC
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

luxorAR.ini

SHA256 9e38c02b5c84bb08f35f383f5fff539df7b708bdbe4f1f0c621bb8a8ff1fbe9f
MD5 50561737de7b5d57e86e81eb17ee667b
SHA1 472badce6cf9c561a83e3926b64fd4d61b1f50dd
SHA512 e59c44f68a3a134e0cbde1b55284b642d3e94a70a57b4e75c314097926bb24e72c569f91675f377cab12ce8858893d2c0780f2aaea05ed5fb3db675ba012c0e7
TLSH
T164F0D3DCE54A8D9C083FCC585FBC7CAD560141A848525BCC72C06C852E9731B27D85BC
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

net.dll

IMPHASH 8dec7bb63e82322b7f5ea6fc3795a13d
SHA256 ddb66c16612adb75997728de8150871a83cf270757c620f39df3e4b17e56e856
MD5 83c4a86decc9b14e4dbdbaad3fe5f7cb
SHA1 6dbb2307019b93b8199011a76ae269e92d9bd335
SHA512 07f5b75a1f3ccc3f5393c5fa06edf8e35bfd18c140208e19d82e2c8bef8e7ae5f93f71dd631001a20bf02be3b3dfe10632fc586a79c864a97b569b849e085347
SSDEEP 768:PQV5ootkFko9P1hX15gTbgxMWzL8lhNS0c12iKwseCrCyUBhjEiAMoXECsRuJcvZ:PQnoMkZ315gTIEhT0+rCyGbgs8OiVk
TLSH
T1E373AF5075E681B2C1CC513728462B37AFBDAD200EE744B3CF69CE697E71991A63B107
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

14916

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

ws2_32

WSAGetLastError recv send getsockname getservbyport getservbyname gethostbyaddr gethostbyname inet_ntoa inet_addr ioctlsocket select setsockopt closesocket connect accept listen bind socket WSACleanup WSAStartup htonl htons

kernel32

GetCurrentProcess LCMapStringW LCMapStringA SetEndOfFile GetStringTypeW GetStringTypeA LoadLibraryA GetProcAddress GetOEMCP GetACP GetCPInfo IsBadCodePtr RtlUnwind GetCommandLineA GetVersion HeapFree GetCurrentThreadId TlsSetValue TlsAlloc TlsFree SetLastError TlsGetValue GetLastError EnterCriticalSection LeaveCriticalSection CloseHandle ReadFile HeapAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection SetFilePointer InitializeCriticalSection ExitProcess TerminateProcess GetModuleFileNameA FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStrings GetEnvironmentStringsW GetModuleHandleA GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate VirtualFree WriteFile VirtualAlloc HeapReAlloc IsBadWritePtr InterlockedDecrement InterlockedIncrement MultiByteToWideChar SetStdHandle FlushFileBuffers CreateFileA SetUnhandledExceptionFilter IsBadReadPtr

??0Network@@QAE@ABV0@@Z ??0Network@@QAE@XZ ??0ProtocolHTTP@@QAE@XZ ??0ProtocolSMTP@@QAE@XZ ??0Tcp@@QAE@ABV0@@Z ??0Tcp@@QAE@I@Z ??1Network@@UAE@XZ ??1ProtocolHTTP@@UAE@XZ ??1ProtocolSMTP@@UAE@XZ ??1Tcp@@UAE@XZ ??4Network@@QAEAAV0@ABV0@@Z ??4Tcp@@QAEAAV0@ABV0@@Z ??_7Network@@6B@ ??_7Tcp@@6B@ ??_FTcp@@QAEXXZ ?Accept@Network@@IAEHPAIIPAUsockaddr@@PAH@Z ?Bind@Network@@IAEHIPBUsockaddr@@H@Z ?Close@Network@@IAEHI@Z ?Connect@Network@@IAEHIPBUsockaddr@@H@Z ?Error@Network@@IAAXPBDZZ ?GetError@Network@@IAEHXZ ?GetHostByAddr@Network@@IAEHPAPAUhostent@@PBDIH@Z ?GetHostByName@Network@@IAEHPAPAUhostent@@PBD@Z ?GetServByName@Network@@IAEHPAPAUservent@@PBD1@Z ?GetServByPort@Network@@IAEHPAPAUservent@@FPBD@Z ?GetSockName@Network@@IAEHIPAUsockaddr@@PAH@Z ?Inet_Addr@Network@@IAEHPAHPBD@Z ?Inet_Ntoa@Network@@IAEPBDUin_addr@@@Z ?Init@Network@@KAHXZ ?Listen@Network@@IAEHIH@Z ?Recv@Network@@IAEHPAHIPAXIH@Z ?ReportError@Network@@IAEXXZ ?ResetError@Network@@IAEXXZ ?Select@Network@@IAEHPAHHPAUfd_set@@11PBUtimeval@@@Z ?Send@Network@@IAEHPAHIPBDIH@Z ?SetErrorCallback@Network@@QAEXP6A_NPBD@Z@Z ?SetNonBlocking@Network@@IAEHI@Z ?SetSockOpt@Network@@IAEHPAHIHHPBXH@Z ?Shutdown@Network@@KAHXZ ?Socket@Network@@IAEHPAIHHH@Z ?__singleRead@Tcp@@AAEIPAD@Z ?__singleReadSocket@Tcp@@AAEIIPAD@Z ?_cliConnect@Tcp@@IAEHPAUin_addr@@F@Z ?_closeSocket@Tcp@@IAEXXZ ?_readline@Tcp@@IAEIPAXI@Z ?_readlineSocket@Tcp@@IAEIIPAXI@Z ?_write@Tcp@@IAAIPBDZZ ?_writeSocket@Tcp@@IAAIIPBDZZ ?beginData@ProtocolSMTP@@QAEHXZ ?cliConnect@Tcp@@QAEHPBDG@Z ?cliConnectToService@Tcp@@QAEHPBD0@Z ?endData@ProtocolSMTP@@QAEHXZ ?getPage@ProtocolHTTP@@QAEHPBDPAD@Z ?getPageLength@ProtocolHTTP@@QAEIPBD@Z ?protocolConnect@ProtocolHTTP@@QAEHPBD@Z ?protocolConnect@ProtocolSMTP@@QAEHPBD@Z ?protocolDisconnect@ProtocolHTTP@@QAEHXZ ?protocolDisconnect@ProtocolSMTP@@QAEHXZ ?reset@ProtocolHTTP@@QAEHXZ ?reset@ProtocolSMTP@@QAEHXZ ?sendFile@ProtocolSMTP@@QAEHPBD@Z ?sendMessage@ProtocolSMTP@@QAAHPBDZZ ?setRecipient@ProtocolSMTP@@QAEHPBD@Z ?setSender@ProtocolSMTP@@QAEHPBD@Z ?svrAcceptClient@Tcp@@QAEHPAIPAUsockaddr_in@@@Z ?svrListen@Tcp@@QAEHGH@Z

snd3d.dll

IMPHASH 843c65c377b830677de74391a8f640f8
SHA256 e90bc2baa38235ec0f5174d2dd5dd05445578e4ffcb9e5c5e5669e4d5ac3bd56
MD5 3208ab46a1cc2ff6c16deae0791f3c62
SHA1 5a568e0d0debf6c45304124c8a08b79059978c37
SHA512 db6c2f9141cf746953c962b9212d1f4cc0e212b2d5965944038f980a5e0cc1bb6877b0ab0d9a0c7887689cf0b7aae42fec9561e01b13c95560fe07a6e0e218ae
SSDEEP 768:ZFy/l2vMkgP3DRHD38IakFEJDPe/F1YDkq:ZellkM3DRjMIakFEJDPe/F1YDk
TLSH
T1F3232A26116310FCD381E37999BD323B7AB5C98919C273C34F37EA723975171AE1622A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

26483

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

??0snd3dDriver@@QAE@ABV0@@Z ??0snd3dDriver@@QAE@XZ ??0snd3dHandle@@QAE@ABV0@@Z ??0snd3dHandle@@QAE@W4e_snd3dSoundTypes@@PAVsnd3dSound@@@Z ??0snd3dHandleManager@@QAE@ABV0@@Z ??0snd3dHandleManager@@QAE@PAVsnd3dDriver@@PAVsnd3dSampleFactory@@@Z ??0snd3dSample@@QAE@ABV0@@Z ??0snd3dSample@@QAE@XZ ??0snd3dScriptObject@@QAE@ABV0@@Z ??0snd3dScriptObject@@QAE@H@Z ??0snd3dSound@@QAE@ABV0@@Z ??0snd3dSound@@QAE@XZ ??0snd3dSoundMusic@@QAE@ABV0@@Z ??0snd3dSoundMusic@@QAE@XZ ??0snd3dSoundSample@@QAE@ABV0@@Z ??0snd3dSoundSample@@QAE@XZ ??0snd3dSoundStream@@QAE@ABV0@@Z ??0snd3dSoundStream@@QAE@XZ ??0snd3dSubSong@@QAE@ABV0@@Z ??0snd3dSubSong@@QAE@XZ ??0snd3dSubsystem@@QAE@ABV0@@Z ??0snd3dSubsystem@@QAE@PAVsnd3dDriver@@@Z ??1snd3dDriver@@UAE@XZ ??1snd3dHandle@@UAE@XZ ??1snd3dHandleManager@@UAE@XZ ??1snd3dSample@@UAE@XZ ??1snd3dSound@@UAE@XZ ??1snd3dSoundMusic@@UAE@XZ ??1snd3dSoundSample@@UAE@XZ ??1snd3dSoundStream@@UAE@XZ ??1snd3dSubSong@@UAE@XZ ??1snd3dSubsystem@@UAE@XZ ??4snd3dDriver@@QAEAAV0@ABV0@@Z ??4snd3dHandle@@QAEAAV0@ABV0@@Z ??4snd3dHandleManager@@QAEAAV0@ABV0@@Z ??4snd3dSample@@QAEAAV0@ABV0@@Z ??4snd3dScriptObject@@QAEAAV0@ABV0@@Z ??4snd3dSound@@QAEAAV0@ABV0@@Z ??4snd3dSoundMusic@@QAEAAV0@ABV0@@Z ??4snd3dSoundSample@@QAEAAV0@ABV0@@Z ??4snd3dSoundStream@@QAEAAV0@ABV0@@Z ??4snd3dSubSong@@QAEAAV0@ABV0@@Z ??4snd3dSubsystem@@QAEAAV0@ABV0@@Z ??_7snd3dDriver@@6B@ ??_7snd3dHandle@@6B@ ??_7snd3dHandleManager@@6B@ ??_7snd3dSample@@6B@ ??_7snd3dScriptObject@@6B@ ??_7snd3dSound@@6B@ ??_7snd3dSoundMusic@@6B@ ??_7snd3dSoundSample@@6B@ ??_7snd3dSoundStream@@6B@ ??_7snd3dSubSong@@6B@ ??_7snd3dSubsystem@@6B@ ??_C@_0BC@IBLE@snd3dsoundmusic?4h?$AA@ ??_C@_0BC@OOFB@snd3dSoundMusic?4h?$AA@ ??_C@_0BD@IAOJ@snd3dSoundStream?4h?$AA@ ??_C@_0BD@KIIG@snd3dsoundstream?4h?$AA@ ??_C@_0BD@MKMJ@snd3dSoundSample?4h?$AA@ ??_C@_0BD@OCKG@snd3dsoundsample?4h?$AA@ ?_addToList@snd3dSoundMusic@@IAEHPAVsnd3dSubSong@@@Z ?_clear@snd3dSoundMusic@@IAEXXZ ?_garbageCollect@snd3dSubsystem@@IAEX_N@Z ?_parse@snd3dSubsystem@@IAEHPAVParser@@PAVsnd3dScriptContext@@@Z ?_releaseAllHandles@snd3dHandleManager@@IAEXXZ ?allocHandle@snd3dSoundMusic@@UAEPAVsnd3dHandle@@W4e_snd3dSoundTypes@@PAVsnd3dDriver@@PAVsnd3dSampleFactory@@@Z ?allocHandle@snd3dSoundSample@@UAEPAVsnd3dHandle@@W4e_snd3dSoundTypes@@PAVsnd3dDriver@@PAVsnd3dSampleFactory@@@Z ?allocHandle@snd3dSoundStream@@UAEPAVsnd3dHandle@@W4e_snd3dSoundTypes@@PAVsnd3dDriver@@PAVsnd3dSampleFactory@@@Z ?allocSound@snd3dSound@@SAPAV1@PBD00@Z ?allocSubSong@snd3dSubSong@@SAPAV1@PBD@Z ?create@snd3dHandleManager@@QAEPAVsnd3dHandle@@W4e_snd3dSoundTypes@@PAVsnd3dSound@@@Z ?createSamples@snd3dSound@@UAEXPAVsnd3dSampleFactory@@@Z ?createSamples@snd3dSoundSample@@UAEXPAVsnd3dSampleFactory@@@Z ?finalizeObject@snd3dScriptObject@@UAEXPAV1@@Z ?finalizeObject@snd3dSubsystem@@MAEXPAVsnd3dScriptObject@@@Z ?g_snd3d@@3PAVsnd3dSubsystem@@A ?getMasterVolume@snd3dSubsystem@@QAEMW4e_snd3dSoundTypes@@@Z ?getScriptType@snd3dScriptObject@@QBEHXZ ?getState@snd3dHandle@@QBEHXZ ?getSubSong@snd3dSoundMusic@@QAEPAVsnd3dSubSong@@PBD@Z ?getType@snd3dHandle@@QBEHXZ ?getTypeId@snd3dSound@@SAHPBD@Z ?initialize@snd3dSubsystem@@QAEHPAVPreferences@@PAUHWND__@@_N@Z ?loadSoundLibrary@snd3dSubsystem@@QAEHPBD@Z ?parseCommand@snd3dSound@@UAEPAVsnd3dScriptObject@@PAVParser@@PBD@Z ?parseCommand@snd3dSoundMusic@@UAEPAVsnd3dScriptObject@@PAVParser@@PBD@Z ?parseCommand@snd3dSoundSample@@UAEPAVsnd3dScriptObject@@PAVParser@@PBD@Z ?parseCommand@snd3dSubSong@@UAEPAVsnd3dScriptObject@@PAVParser@@PBD@Z ?parseCommand@snd3dSubsystem@@MAEPAVsnd3dScriptObject@@PAVParser@@PBD@Z ?playSound@snd3dSubsystem@@QAEPAVsnd3dHandle@@PBD_N@Z ?playSound@snd3dSubsystem@@QAEPAVsnd3dHandle@@W4e_snd3dSoundTypes@@PBD_N2@Z ?releaseSamples@snd3dSound@@UAEXPAVsnd3dSampleFactory@@@Z ?releaseSamples@snd3dSoundSample@@UAEXPAVsnd3dSampleFactory@@@Z ?resetFrequency@snd3dHandle@@QAEXXZ ?resetFrequency@snd3dHandleManager@@QAEXW4e_snd3dSoundTypes@@@Z ?resetVolume@snd3dHandle@@QAEXXZ ?resetVolume@snd3dHandleManager@@QAEXW4e_snd3dSoundTypes@@@Z ?s_allocator@snd3dSoundMusic@@SAPAVsnd3dSound@@XZ ?s_allocator@snd3dSoundSample@@SAPAVsnd3dSound@@XZ ?s_allocator@snd3dSoundStream@@SAPAVsnd3dSound@@XZ ?set3d@snd3dHandle@@QAEXQAM0@Z ?setAttenuation@snd3dHandle@@QAEXMM@Z ?setCoopLevel@snd3dDriver@@UAEXPAUHWND__@@_N@Z ?setCoopLevel@snd3dSubsystem@@QAEXPAUHWND__@@_N@Z ?setEventCb@snd3dHandle@@QAEXHP6A_NHPAXPAV1@0H@Z0@Z ?setFrequencyScale@snd3dHandle@@QAEXM@Z ?setLoop@snd3dHandle@@QAEX_N@Z ?setMasterFrequency@snd3dSubsystem@@QAEXW4e_snd3dSoundTypes@@M@Z ?setMasterVolume@snd3dSubsystem@@QAEXW4e_snd3dSoundTypes@@M@Z ?setMute@snd3dHandle@@QAEX_N@Z ?setMute@snd3dHandleManager@@QAEXW4e_snd3dSoundTypes@@_N@Z ?setMute@snd3dSubsystem@@QAEXW4e_snd3dSoundTypes@@_N@Z ?setPan@snd3dHandle@@QAEXM@Z ?setPause@snd3dHandle@@QAEX_N@Z ?setPause@snd3dHandleManager@@QAEXW4e_snd3dSoundTypes@@_N@Z ?setPause@snd3dSubsystem@@QAEXW4e_snd3dSoundTypes@@_N@Z ?setPriority@snd3dHandle@@QAEXH@Z ?setSubSong@snd3dHandle@@UAEXPBD_N@Z ?setVolume@snd3dHandle@@QAEXM@Z ?shutdown@snd3dSubsystem@@QAEHXZ ?startPlaylist@snd3dSubsystem@@QAEXPBD0_N@Z ?stop@snd3dHandle@@QAEXXZ ?stopPlaylist@snd3dSubsystem@@QAEX_N@Z ?suspend@snd3dSubsystem@@QAEX_N@Z ?update@snd3dHandleManager@@QAEXXZ ?update@snd3dSubsystem@@QAEXM@Z

snd3d_fmod.dll

IMPHASH 36dc2021365786f120708a6da019f900
SHA256 1ec55f349ec7b8dfca364ddf689f158d7d1e55e540d91d8bb2029b1a3eb6bbef
MD5 18068f2278294c8b578485a7b22e4aa2
SHA1 9593d10364c52ea6ee6f9a38a1d8bbbfa34df6fd
SHA512 785e93a72baa01a584eae21f9b4dadcda1782b3463753e0d617129315f81bf4ccb47c3476294addefffdc567f3f44dcb970381fa8b097fffcee5827e84fdb491
SSDEEP 384:0nAcE6dhZMjAxAii+2JiyLPVJDndck/nPzMLyZE:0Ad6Z6AxAi2PPVRdjP
TLSH
T10BE23B25387700F4CB78843024ABBA37DE35EC6607F4B5D387A5D99A6D1C293B962E43
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

13447

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

core

?g_MemoryPtr@@3PAVMemoryMgr@@A ?alloc@MemoryMgr@@QAEPAXHIPBDI@Z ?free@MemoryMgr@@QAEHHPAX@Z

logger

?log@udLogger@@SAXHPBDZZ

fmod

_FSOUND_SetPriority@8 _FSOUND_3D_SetMinMaxDistance@12 _FSOUND_3D_SetAttributes@12 _FSOUND_SetLoopMode@8 _FSOUND_SetPaused@8 _FSOUND_GetPaused@4 _FSOUND_SetMute@8 _FSOUND_StopSound@4 _FMUSIC_IsPlaying@4 _FMUSIC_SetOrderCallback@12 _FMUSIC_SetUserData@8 _FMUSIC_PlaySong@4 _FMUSIC_GetOpenState@4 _FMUSIC_LoadSongEx@24 _FMUSIC_FreeSong@4 _FMUSIC_StopSong@4 _FMUSIC_SetLooping@8 _FMUSIC_SetPanSeperation@8 _FMUSIC_SetMasterVolume@8 _FMUSIC_GetType@4 _FMUSIC_GetMasterVolume@4 _FMUSIC_SetPaused@8 _FSOUND_SetPan@8 _FMUSIC_GetNumOrders@4 _FMUSIC_GetOrder@4 _FMUSIC_GetUserData@4 _FMUSIC_SetOrder@8 _FMUSIC_GetRealChannel@8 _FMUSIC_GetNumChannels@4 _FSOUND_GetVersion@0 _FSOUND_Stream_SetSyncCallback@12 _FSOUND_Stream_SetEndCallback@12 _FSOUND_Stream_PlayEx@16 _FSOUND_Stream_GetOpenState@4 _FSOUND_Stream_Open@16 _FSOUND_Stream_Close@4 _FSOUND_Stream_SetMode@8 _FSOUND_Sample_Load@20 _FSOUND_Sample_Free@4 _FSOUND_PlaySoundEx@16 _FSOUND_Sample_SetMaxPlaybacks@8 _FSOUND_Sample_SetMinMaxDistance@12 _FSOUND_Sample_SetDefaultsEx@32 _FSOUND_Sample_GetDefaults@20 _FSOUND_Sample_GetLength@4 _FSOUND_SetFrequency@8 _FSOUND_SetVolume@8 _FSOUND_GetFrequency@4 _FSOUND_GetVolume@4 _FSOUND_Update@0 _FSOUND_GetMemoryStats@8 _FMUSIC_SetMasterSpeed@8 _FSOUND_Close@0 _FSOUND_GetOutputHandle@0 _FSOUND_GetError@0 _FSOUND_Init@12 _FSOUND_File_SetCallbacks@20 _FSOUND_SetMinHardwareChannels@4 _FSOUND_SetMemorySystem@20 _FSOUND_SetMixer@4 _FSOUND_GetDriverName@4 _FSOUND_GetDriver@0 _FSOUND_SetDriver@4 _FSOUND_SetOutput@4 _FSOUND_IsPlaying@4

file

?close@File@@YAHPAU_MjzFileType_s@@@Z ?unregisterThread@File@@YAXXZ ?seek@File@@YAHPAU_MjzFileType_s@@HH@Z ?readBytes@File@@YAIPAXIPAU_MjzFileType_s@@@Z ?registerThread@File@@YAXXZ ?open@File@@YAPAU_MjzFileType_s@@PBD0@Z ?tell@File@@YAHPAU_MjzFileType_s@@@Z

snd3d

??1snd3dSample@@UAE@XZ ?setMute@snd3dHandle@@QAEX_N@Z ?setPause@snd3dHandle@@QAEX_N@Z ??1snd3dHandle@@UAE@XZ ??0snd3dHandle@@QAE@W4e_snd3dSoundTypes@@PAVsnd3dSound@@@Z ??0snd3dSample@@QAE@XZ ??0snd3dDriver@@QAE@XZ ??1snd3dSubsystem@@UAE@XZ ??0snd3dSubsystem@@QAE@PAVsnd3dDriver@@@Z ?parseCommand@snd3dSubsystem@@MAEPAVsnd3dScriptObject@@PAVParser@@PBD@Z ?finalizeObject@snd3dSubsystem@@MAEXPAVsnd3dScriptObject@@@Z ?setCoopLevel@snd3dDriver@@UAEXPAUHWND__@@_N@Z ?setSubSong@snd3dHandle@@UAEXPBD_N@Z ??1snd3dDriver@@UAE@XZ ?getSubSong@snd3dSoundMusic@@QAEPAVsnd3dSubSong@@PBD@Z

msvcrt

__CxxFrameHandler realloc free _adjust_fdiv _initterm ?terminate@@YAXXZ _except_handler3 _ftol malloc

kernel32

DisableThreadLibraryCalls

??0snd3dBase_fmod@@QAE@ABV0@@Z ??0snd3dBase_fmod@@QAE@XZ ??0snd3dDriver_fmod@@QAE@ABV0@@Z ??0snd3dDriver_fmod@@QAE@XZ ??1snd3dBase_fmod@@UAE@XZ ??1snd3dDriver_fmod@@UAE@XZ ??4snd3dBase_fmod@@QAEAAV0@ABV0@@Z ??4snd3dDriver_fmod@@QAEAAV0@ABV0@@Z ??_7snd3dBase_fmod@@6B@ ??_7snd3dDriver_fmod@@6Bsnd3dBase_fmod@@@ ??_7snd3dDriver_fmod@@6Bsnd3dDriver@@@ ?FMOD_GetErrorString@snd3dBase_fmod@@SAPADH@Z ?allocHandleMusic@snd3dDriver_fmod@@UAEPAVsnd3dHandle@@W4e_snd3dSoundTypes@@PAVsnd3dSound@@@Z ?allocHandleSample@snd3dDriver_fmod@@UAEPAVsnd3dHandle@@W4e_snd3dSoundTypes@@PAVsnd3dSound@@PAVsnd3dSample@@@Z ?allocHandleStream@snd3dDriver_fmod@@UAEPAVsnd3dHandle@@W4e_snd3dSoundTypes@@PAVsnd3dSound@@@Z ?allocSample@snd3dDriver_fmod@@UAEPAVsnd3dSample@@XZ ?getMasterVolume@snd3dDriver_fmod@@UAEMH@Z ?initialize@snd3dDriver_fmod@@UAEHPAVsnd3dPreferences@@PAUHWND__@@_N@Z ?s_frequencyLimit@snd3dBase_fmod@@1PAHA ?s_getMasterVolume@snd3dBase_fmod@@SAMH@Z ?s_initialize@snd3dBase_fmod@@SAHPAUHWND__@@@Z ?s_initialized@snd3dBase_fmod@@1_NA ?s_masterFrequency@snd3dBase_fmod@@1PAMA ?s_masterMute@snd3dBase_fmod@@1PA_NA ?s_masterPause@snd3dBase_fmod@@1PA_NA ?s_masterVolume@snd3dBase_fmod@@1PAMA ?s_memoryStats@snd3dBase_fmod@@SAXXZ ?s_setMasterFrequency@snd3dBase_fmod@@SAXHM@Z ?s_setMasterMute@snd3dBase_fmod@@SAXH_N@Z ?s_setMasterPause@snd3dBase_fmod@@SAXH_N@Z ?s_setMasterVolume@snd3dBase_fmod@@SAXHM@Z ?s_shutdown@snd3dBase_fmod@@SAXXZ ?s_snd3dMemory@snd3dBase_fmod@@1PAXA ?s_snd3dMemorySize@snd3dBase_fmod@@1IA ?s_sndPrefs@snd3dBase_fmod@@1PAVsnd3dPreferences@@A ?s_speedLimit@snd3dBase_fmod@@1PAMA ?setMasterFrequency@snd3dDriver_fmod@@UAEXHM@Z ?setMasterMute@snd3dDriver_fmod@@UAEXH_N@Z ?setMasterPause@snd3dDriver_fmod@@UAEXH_N@Z ?setMasterVolume@snd3dDriver_fmod@@UAEXHM@Z ?shutdown@snd3dDriver_fmod@@UAEHXZ ?update@snd3dDriver_fmod@@UAEXM@Z CreateSnd3dSubsystem

ui2.dll

IMPHASH 6b279a910cd5403516342087ea2dd612
SHA256 7bc2f53c7f2cb0fead9ed0ab013c74fbfed930b6394968dc4bc758d24b695803
MD5 3c39d7793a3deb4c6c5f5d18b4c20105
SHA1 2a5859c45eff649c5142714f3ab6dd8258c815c2
SHA512 5b608c435aa95301af771998f34f0f74fd89eb51679b8b6005ddbc81536cf65453227e3c07f3b2234b16e357f12ee9342db9f652cf0cf597e11a33144cca94e6
SSDEEP 3072:Tu9dW1fERscEXAX7X1YDmVUeBX2FT1Csh8+kz1Elmh:FERfmALX1Y8UyGdx8+kz1El
TLSH
T121047C423DAD02BEC34D997C2C562BB7EA3FE6A493E25F835F7CDD8119251B40926312
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

67418

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

core

?free@MemoryMgr@@QAEHHPAX@Z ?g_MemoryPtr@@3PAVMemoryMgr@@A ?alloc@MemoryMgr@@QAEPAXHIPBDI@Z ?ParamEqualsInt32@Parser@@QAE_NPBD0PAH@Z ?GetToken@Parser@@QAEPADPAD@Z ?ParamEqualsInt32_2@Parser@@QAE_NPBD0PAH1@Z ?ParamEqualsFloat32_2@Parser@@QAE_NPBD0PAM1@Z ?ParamEqualsUInt32@Parser@@QAE_NPBD0PAI@Z ?GetEqualsToken@Parser@@QAE_NXZ ?Sleep@Platform@@YAXI@Z ?ParamEqualsBoolean@Parser@@QAE_NPBD0PA_N@Z ?ParamEqualsFloat32@Parser@@QAE_NPBD0PAM@Z ?ShowCursor@Platform@@YAX_N@Z ?GetCursorPos@Platform@@YAXAAH0@Z ?translate@StringTable@@QAEPBEPBD@Z ?g_stringTblPtr@@3PAVStringTable@@A ?GetString@Parser@@QAEPADXZ ?ParseLine@Parser@@QAE_NXZ ??1Parser@@UAE@XZ ??0Parser@@QAE@PAD@Z

logger

?registerClient@udLogger@@SAHPBD@Z ?log@udLogger@@SAXHPBDZZ

snd3d

?setPan@snd3dHandle@@QAEXM@Z ?setFrequencyScale@snd3dHandle@@QAEXM@Z ?g_snd3d@@3PAVsnd3dSubsystem@@A ?playSound@snd3dSubsystem@@QAEPAVsnd3dHandle@@W4e_snd3dSoundTypes@@PBD_N2@Z

file

?unregisterThread@File@@YAXXZ ?registerThread@File@@YAXXZ ?close@File@@YAHPAU_MjzFileType_s@@@Z ?read@File@@YAIPAXIIPAU_MjzFileType_s@@@Z ?getLength@File@@YAHPAU_MjzFileType_s@@@Z ?open@File@@YAPAU_MjzFileType_s@@PBD0@Z

gfx2d

?g_gfx@@3PAVgfxSubsystem@@A ?getSpriteWidth@gfxSubsystem@@QBEHH@Z ?getSpriteHeight@gfxSubsystem@@QBEHH@Z ?blt@gfxSubsystem@@QAEXHHHHHHE@Z ?createSprite@gfxSubsystem@@QAEHPBD@Z ?unregisterThread@gfxSubsystem@@QAEXPBD@Z ?registerThread@gfxSubsystem@@QAEXPBD@Z ?addEvent@gfxSubsystem@@QAEXHHHHMPAX@Z ?createParticleSystemInstance@gfxSubsystem@@QAEHPBD0@Z ?releaseParticleSystemInstance@gfxSubsystem@@QAEXPBD@Z ?particleSystemInstanceIsDead@gfxSubsystem@@QAE_NH@Z ?getScreenWidth@gfxSubsystem@@QBEHXZ ?releaseParticleSystemInstance@gfxSubsystem@@QAEXH@Z ?getSpriteName@gfxSubsystem@@QAEPBDH@Z ?releaseSprite@gfxSubsystem@@QAEXPBD@Z ?setupAlphaTestSprite@gfxSubsystem@@QAEXH@Z ?getCharDimensions@gfxSubsystem@@QBE_NHHIPAH0@Z ?getFontHeight@gfxSubsystem@@QBEHH@Z ?getMaxDepthNode@gfxSubsystem@@QBEHXZ ?updateParticleSystem@gfxSubsystem@@QAEXHHHM@Z ?psemit@gfxSubsystem@@QAEXHHM@Z ?alphaTestSprite@gfxSubsystem@@QAE_NHHHHH@Z ?getFontDimensions@gfxSubsystem@@QBEXHPAH0@Z ?createFont@gfxSubsystem@@QAEHPBD@Z ?print@gfxSubsystem@@QAEXHHHHHHHEPBD@Z ?getSpriteFrameCount@gfxSubsystem@@QBEHHH@Z ?getTextRect@gfxSubsystem@@QAEXHHHHPBIPAH111@Z ?particleSystemInstanceStopEmitters@gfxSubsystem@@QAEXH@Z ?blt@gfxSubsystem@@QAEXHHHHHHHHHHE@Z ?blt@gfxSubsystem@@QAEXHHHHHHHHE@Z ?print@gfxSubsystem@@QAEXHHHHHHHEPBI@Z

kernel32

EnterCriticalSection FlushFileBuffers SetStdHandle ReadFile GetStringTypeW GetStringTypeA LoadLibraryA GetOEMCP GetACP GetCPInfo SetFilePointer VirtualAlloc IsBadCodePtr IsBadWritePtr IsBadReadPtr SetUnhandledExceptionFilter WriteFile VirtualFree HeapCreate HeapDestroy GetVersionExA GetEnvironmentVariableA GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA GetModuleFileNameA GetStartupInfoA GetFileType GetStdHandle SetHandleCount HeapSize HeapReAlloc LCMapStringW LCMapStringA WideCharToMultiByte MultiByteToWideChar UnhandledExceptionFilter GetCurrentProcess TerminateProcess ExitProcess HeapAlloc HeapFree GetModuleHandleA GetProcAddress TlsGetValue SetLastError TlsFree TlsAlloc GetVersion GetCommandLineA InterlockedIncrement InterlockedDecrement ExitThread InitializeCriticalSection CloseHandle WaitForSingleObject DeleteCriticalSection LeaveCriticalSection RtlUnwind GetLastError CreateThread GetCurrentThreadId TlsSetValue

??0uiBackgroundLoader@@QAE@ABV0@@Z ??0uiBackgroundLoader@@QAE@XZ ??0uiButton@@QAE@ABV0@@Z ??0uiButton@@QAE@XZ ??0uiDialog@@QAE@ABV0@@Z ??0uiDialog@@QAE@XZ ??0uiDigitalBanner@@QAE@ABV0@@Z ??0uiDigitalBanner@@QAE@XZ ??0uiEntryWidget@@QAE@ABV0@@Z ??0uiEntryWidget@@QAE@XZ ??0uiFlowLayout@@QAE@ABV0@@Z ??0uiFlowLayout@@QAE@XZ ??0uiGameContainer@@QAE@ABV0@@Z ??0uiGameContainer@@QAE@XZ ??0uiNonVisualWidget@@QAE@ABV0@@Z ??0uiNonVisualWidget@@QAE@XZ ??0uiParticleSystem@@QAE@ABV0@@Z ??0uiParticleSystem@@QAE@XZ ??0uiProgressBar@@QAE@ABV0@@Z ??0uiProgressBar@@QAE@XZ ??0uiRadioButton@@QAE@ABV0@@Z ??0uiRadioButton@@QAE@XZ ??0uiRadioGroup@@QAE@ABV0@@Z ??0uiRadioGroup@@QAE@XZ ??0uiSliderButton@@QAE@ABV0@@Z ??0uiSliderButton@@QAE@XZ ??0uiSprite@@QAE@ABV0@@Z ??0uiSprite@@QAE@XZ ??0uiSubsystem@@QAE@ABV0@@Z ??0uiSubsystem@@QAE@XZ ??0uiTextWidget@@QAE@ABV0@@Z ??0uiTextWidget@@QAE@XZ ??0uiToggleButton@@QAE@ABV0@@Z ??0uiToggleButton@@QAE@XZ ??0uiVisualWidget@@QAE@ABV0@@Z ??0uiVisualWidget@@QAE@XZ ??0uiWidget@@QAE@ABV0@@Z ??0uiWidget@@QAE@XZ ??1uiBackgroundLoader@@UAE@XZ ??1uiButton@@UAE@XZ ??1uiDialog@@UAE@XZ ??1uiDigitalBanner@@UAE@XZ ??1uiEntryWidget@@UAE@XZ ??1uiFlowLayout@@UAE@XZ ??1uiGameContainer@@UAE@XZ ??1uiNonVisualWidget@@UAE@XZ ??1uiParticleSystem@@UAE@XZ ??1uiProgressBar@@UAE@XZ ??1uiRadioButton@@UAE@XZ ??1uiRadioGroup@@UAE@XZ ??1uiSliderButton@@UAE@XZ ??1uiSprite@@UAE@XZ ??1uiSubsystem@@UAE@XZ ??1uiTextWidget@@UAE@XZ ??1uiToggleButton@@UAE@XZ ??1uiVisualWidget@@UAE@XZ ??1uiWidget@@UAE@XZ ??4uiBackgroundLoader@@QAEAAV0@ABV0@@Z ??4uiButton@@QAEAAV0@ABV0@@Z ??4uiDialog@@QAEAAV0@ABV0@@Z ??4uiDigitalBanner@@QAEAAV0@ABV0@@Z ??4uiEntryWidget@@QAEAAV0@ABV0@@Z ??4uiFlowLayout@@QAEAAV0@ABV0@@Z ??4uiGameContainer@@QAEAAV0@ABV0@@Z ??4uiNonVisualWidget@@QAEAAV0@ABV0@@Z ??4uiParticleSystem@@QAEAAV0@ABV0@@Z ??4uiProgressBar@@QAEAAV0@ABV0@@Z ??4uiRadioButton@@QAEAAV0@ABV0@@Z ??4uiRadioGroup@@QAEAAV0@ABV0@@Z ??4uiSliderButton@@QAEAAV0@ABV0@@Z ??4uiSprite@@QAEAAV0@ABV0@@Z ??4uiSubsystem@@QAEAAV0@ABV0@@Z ??4uiTextWidget@@QAEAAV0@ABV0@@Z ??4uiToggleButton@@QAEAAV0@ABV0@@Z ??4uiVisualWidget@@QAEAAV0@ABV0@@Z ??4uiWidget@@QAEAAV0@ABV0@@Z ??_7uiBackgroundLoader@@6B@ ??_7uiButton@@6B@ ??_7uiDialog@@6B@ ??_7uiDigitalBanner@@6B@ ??_7uiEntryWidget@@6B@ ??_7uiFlowLayout@@6B@ ??_7uiGameContainer@@6B@ ??_7uiNonVisualWidget@@6B@ ??_7uiParticleSystem@@6B@ ??_7uiProgressBar@@6B@ ??_7uiRadioButton@@6B@ ??_7uiRadioGroup@@6B@ ??_7uiSliderButton@@6B@ ??_7uiSprite@@6B@ ??_7uiSubsystem@@6B@ ??_7uiTextWidget@@6B@ ??_7uiToggleButton@@6B@ ??_7uiVisualWidget@@6B@ ??_7uiWidget@@6B@ ??_C@_08BGCP@uiSprite?$AA@ ??_C@_08JGKA@uiDialog?$AA@ ??_C@_08MCEB@uiButton?$AA@ ??_C@_0BA@DDFD@uiGameContainer?$AA@ ??_C@_0BA@DMBN@uiprogressbar?4h?$AA@ ??_C@_0BA@HCM@uiradiobutton?4h?$AA@ ??_C@_0BA@IIHE@uiDigitalBanner?$AA@ ??_C@_0BA@NKKO@uientrywidget?4h?$AA@ ??_C@_0BB@BKKD@uitogglebutton?4h?$AA@ ??_C@_0BB@COLC@uisliderbutton?4h?$AA@ ??_C@_0BB@LHHO@uivisualwidget?4h?$AA@ ??_C@_0BB@ONMO@uiParticleSystem?$AA@ ??_C@_0BC@EDOO@uigamecontainer?4h?$AA@ ??_C@_0BC@FANP@uiNonVisualWidget?$AA@ ??_C@_0BC@MKPN@uidigitalbanner?4h?$AA@ ??_C@_0BD@NCED@uiparticlesystem?4h?$AA@ ??_C@_0L@GKGA@uidialog?4h?$AA@ ??_C@_0L@KFNI@uibutton?4h?$AA@ ??_C@_0L@KFPK@uiwidget?4h?$AA@ ??_C@_0L@NDBK@uisprite?4h?$AA@ ??_C@_0N@HJJL@uiRadioGroup?$AA@ ??_C@_0N@KBLJ@uiFlowLayout?$AA@ ??_C@_0N@OGPA@uiTextWidget?$AA@ ??_C@_0O@IJKK@uiEntryWidget?$AA@ ??_C@_0O@JFAB@uiProgressBar?$AA@ ??_C@_0O@PMLA@uiRadioButton?$AA@ ??_C@_0P@BMHB@uitextwidget?4h?$AA@ ??_C@_0P@BOOP@uiVisualWidget?$AA@ ??_C@_0P@CKC@uiToggleButton?$AA@ ??_C@_0P@LNCF@uiflowlayout?4h?$AA@ ??_C@_0P@NAI@uiSliderButton?$AA@ ??_C@_0P@PBHL@uiradiogroup?4h?$AA@ ?_activate@uiFlowLayout@@MAEXXZ ?_activate@uiToggleButton@@MAEXXZ ?_activate@uiVisualWidget@@MAEXXZ ?_activate@uiWidget@@MAEXXZ ?_addDialogStackCmd@uiSubsystem@@IAEXHPAVuiDialog@@@Z ?_addGlobalInputFocusWidget@uiWidget@@IAEXPAU_WidgetNameList_s@@@Z ?_addMessage@uiDigitalBanner@@IAEPAUdbMessage_t@@I@Z ?_calcLeadingSpace@uiDigitalBanner@@IAEII@Z ?_deactivate@uiButton@@MAEXXZ ?_deactivate@uiToggleButton@@MAEXXZ ?_deactivate@uiVisualWidget@@MAEXXZ ?_deactivate@uiWidget@@MAEXXZ ?_extractMessage@uiDigitalBanner@@IAEXPADPAUdbMessage_t@@@Z ?_gainFocus@uiEntryWidget@@MAEXXZ ?_gainFocus@uiWidget@@MAEXXZ ?_getAction@uiDigitalBanner@@IAE?AW4pieceAction_t@@PBD@Z ?_getButtonAnim@uiButton@@MBEHXZ ?_getDepthValue@uiWidget@@IAEHPBD@Z ?_getValue@uiRadioGroup@@IBEHPBVuiWidget@@@Z ?_hideWidget@uiWidget@@MAEXXZ ?_initPiece@uiDigitalBanner@@IAEXPAUdbMessagePiece_t@@M@Z ?_initialize@uiWidget@@MAEXXZ ?_inputEvent@uiButton@@MAE_NW4e_uiEvent@@HHH_N1@Z ?_inputEvent@uiDialog@@MAE_NW4e_uiEvent@@HHH_N1@Z ?_inputEvent@uiEntryWidget@@MAE_NW4e_uiEvent@@HHH_N1@Z ?_inputEvent@uiNonVisualWidget@@MAE_NW4e_uiEvent@@HHH_N1@Z ?_inputEvent@uiParticleSystem@@MAE_NW4e_uiEvent@@HHH_N1@Z ?_inputEvent@uiRadioButton@@MAE_NW4e_uiEvent@@HHH_N1@Z ?_inputEvent@uiSliderButton@@MAE_NW4e_uiEvent@@HHH_N1@Z ?_inputEvent@uiSprite@@MAE_NW4e_uiEvent@@HHH_N1@Z ?_inputEvent@uiTextWidget@@MAE_NW4e_uiEvent@@HHH_N1@Z ?_inputEvent@uiToggleButton@@MAE_NW4e_uiEvent@@HHH_N1@Z ?_inputEvent@uiVisualWidget@@MAE_NW4e_uiEvent@@HHH_N1@Z ?_inputEvent@uiWidget@@MAE_NW4e_uiEvent@@HHH_N1@Z ?_layoutChild@uiFlowLayout@@MAE_NPAVuiWidget@@@Z ?_lerpToTargetAlpha@uiTextWidget@@MAEXXZ ?_lerpToTargetAlpha@uiVisualWidget@@IAEXI@Z ?_loadCachedScriptlet@uiWidget@@IAEPAEPBDPAI@Z ?_loseFocus@uiButton@@MAEXXZ ?_loseFocus@uiWidget@@MAEXXZ ?_parseBoolean@uiWidget@@MAE_NPAVParser@@@Z ?_parseChildHeader@uiWidget@@KAPAV1@PAVParser@@PAV1@@Z ?_parseError@uiWidget@@KAXPBD@Z ?_parseFlags@uiWidget@@MAEXPAVParser@@@Z ?_parseHotkey@uiButton@@MAEXPBD@Z ?_parseParams@uiButton@@MAEXPAVParser@@PAD@Z ?_parseParams@uiDialog@@MAEXPAVParser@@PAD@Z ?_parseParams@uiDigitalBanner@@MAEXPAVParser@@PAD@Z ?_parseParams@uiEntryWidget@@MAEXPAVParser@@PAD@Z ?_parseParams@uiFlowLayout@@MAEXPAVParser@@PAD@Z ?_parseParams@uiParticleSystem@@MAEXPAVParser@@PAD@Z ?_parseParams@uiProgressBar@@MAEXPAVParser@@PAD@Z ?_parseParams@uiRadioButton@@MAEXPAVParser@@PAD@Z ?_parseParams@uiRadioGroup@@MAEXPAVParser@@PAD@Z ?_parseParams@uiSliderButton@@MAEXPAVParser@@PAD@Z ?_parseParams@uiSprite@@MAEXPAVParser@@PAD@Z ?_parseParams@uiTextWidget@@MAEXPAVParser@@PAD@Z ?_parseParams@uiToggleButton@@MAEXPAVParser@@PAD@Z ?_parseParams@uiVisualWidget@@MAEXPAVParser@@PAD@Z ?_parseParams@uiWidget@@MAEXPAVParser@@PAD@Z ?_parseScriptlet@uiWidget@@IAEXPBD@Z ?_parseSingleFlag@uiButton@@MAEXPBD@Z ?_parseSingleFlag@uiParticleSystem@@MAEXPBD@Z ?_parseSingleFlag@uiWidget@@MAEXPBD@Z ?_parseUI@uiWidget@@KAPAV1@PAEHPAV1@@Z ?_playWithPan@uiWidget@@UAEPAVsnd3dHandle@@PBDIMH@Z ?_popDialog@uiSubsystem@@IAEXXZ ?_print@uiEntryWidget@@MAEXHPBI@Z ?_print@uiTextWidget@@MAEXHPBI@Z ?_progCb@uiWidget@@1P6AXPAV1@PAXW4e_uiProgressEvent@@@ZA ?_progClient@uiWidget@@1PAXA ?_progressReport@uiWidget@@KAXPAV1@W4e_uiProgressEvent@@@Z ?_pushDialog@uiSubsystem@@IAEXPAVuiDialog@@@Z ?_releaseParticleSystemInstance@uiWidget@@IAEXH@Z ?_releaseSprite@uiWidget@@IAEXH@Z ?_removeAllMessages@uiDigitalBanner@@IAEXXZ ?_removeDialogStackCmd@uiSubsystem@@IAEXXZ ?_removeMessage@uiDigitalBanner@@IAEXPAUdbMessage_t@@@Z ?_render@uiButton@@MAEXHH@Z ?_render@uiDigitalBanner@@MAEXHH@Z ?_render@uiEntryWidget@@MAEXHH@Z ?_render@uiNonVisualWidget@@MAEXHH@Z ?_render@uiParticleSystem@@MAEXHH@Z ?_render@uiProgressBar@@MAEXHH@Z ?_render@uiRadioButton@@MAEXHH@Z ?_render@uiSprite@@MAEXHH@Z ?_render@uiTextWidget@@MAEXHH@Z ?_render@uiToggleButton@@MAEXHH@Z ?_render@uiVisualWidget@@MAEXHH@Z ?_renderGfxStatistics@uiSubsystem@@IAEXXZ ?_resetHover@uiButton@@MAEX_N@Z ?_resetParticleSystems@uiDialog@@IAEXPAVuiWidget@@@Z ?_setValue@uiRadioGroup@@IAEXPBVuiWidget@@H@Z ?_showWidget@uiWidget@@MAEXXZ ?_start@uiBackgroundLoader@@KGIPAX@Z ?_strlen@uiDigitalBanner@@IAEHPBD@Z ?_trace@uiWidget@@MAEPAU_uiTrace_s@@HHHPBD@Z ?_update@uiButton@@MAEXHH@Z ?_update@uiDigitalBanner@@MAEXHH@Z ?_update@uiNonVisualWidget@@MAEXHH@Z ?_update@uiParticleSystem@@MAEXHH@Z ?_update@uiProgressBar@@MAEXHH@Z ?_update@uiSliderButton@@MAEXHH@Z ?_update@uiSprite@@MAEXHH@Z ?_update@uiTextWidget@@MAEXHH@Z ?_update@uiVisualWidget@@MAEXHH@Z ?_updateAlpha@uiDigitalBanner@@IAEMPAUdbPieceAction_t@@H@Z ?_updateDialogs@uiSubsystem@@IAEXXZ ?_updatePosition@uiDigitalBanner@@IAEMMMHH@Z ?activate@uiDialog@@QAEX_N@Z ?addChild@uiWidget@@QAEXPAV1@_N@Z ?addGlobalInputFocusWidget@uiWidget@@QAEXPBD@Z ?addTabEntry@uiDialog@@QAEXPAVuiWidget@@@Z ?allocWidget@uiWidget@@SAPAV1@PBD0@Z ?altKeyDown@uiSubsystem@@QBE_NXZ ?applyScriptlet@uiWidget@@UAEXPBD@Z ?assignCallbacks@uiWidget@@QAEXPAU_WidgetMap_s@@PAX@Z ?clearDialogStack@uiSubsystem@@QAEX_N@Z ?clearPendingDialogs@uiSubsystem@@QAEXXZ ?ctrlKeyDown@uiSubsystem@@QBE_NXZ ?defineDepth@uiWidget@@SAXPBDI@Z ?delta@uiProgressBar@@QAEXH@Z ?detachFromParent@uiWidget@@QAEXXZ ?disable@uiButton@@QAEXXZ ?disable@uiSprite@@QAEX_N0@Z ?enable@uiButton@@QAEXXZ ?enter@uiDialog@@UAEXXZ ?exit@uiDialog@@UAEXXZ ?forceTerminate@uiSubsystem@@QAEXXZ ?g_ui@@3PAVuiSubsystem@@A ?getBasisCoords@uiWidget@@QAEXPAH0@Z ?getButtonHeight@uiButton@@QBEHXZ ?getButtonWidth@uiButton@@QBEHXZ ?getChildWidget@uiWidget@@QAEPAV1@PBDH@Z ?getChildren@uiWidget@@QBEPBU_WidgetList_s@@XZ ?getDepth@uiWidget@@QBEIXZ ?getFlowType@uiFlowLayout@@QBE?AW4flowType_e@1@XZ ?getFrame@uiVisualWidget@@UAEHXZ ?getHeight@uiEntryWidget@@UBEHXZ ?getHeight@uiTextWidget@@MBEHXZ ?getHeight@uiWidget@@UBEHXZ ?getId@uiParticleSystem@@QBEHXZ ?getInputFocus@uiWidget@@UBE_NXZ ?getInputFocusWidget@uiSubsystem@@QAEPAVuiWidget@@XZ ?getLastState@uiDialog@@UBEHXZ ?getMousePositionX@uiSubsystem@@QBEHXZ ?getMousePositionY@uiSubsystem@@QBEHXZ ?getOverrideActive@uiWidget@@UBE_NXZ ?getOverrideInputFocus@uiWidget@@UBE_NXZ ?getOverrideVisible@uiWidget@@UBE_NXZ ?getParent@uiWidget@@QAEPAV1@XZ ?getPaused@uiGameContainer@@QBE_NXZ ?getRootWidget@uiWidget@@QAEPAV1@XZ ?getSpriteId@uiVisualWidget@@UAEHXZ ?getState@uiBackgroundLoader@@QBEHXZ ?getState@uiDialog@@UBEHXZ ?getText@uiTextWidget@@QAEPBIXZ ?getTextRect@uiTextWidget@@QBEXPAU_uiRect_s@@@Z ?getToggle@uiToggleButton@@UBE_NXZ ?getTopLevelWidget@uiSubsystem@@QAEPAVuiWidget@@XZ ?getType@uiButton@@UAEPBDXZ ?getType@uiDialog@@UAEPBDXZ ?getType@uiDigitalBanner@@UAEPBDXZ ?getType@uiEntryWidget@@UAEPBDXZ ?getType@uiFlowLayout@@UAEPBDXZ ?getType@uiGameContainer@@UAEPBDXZ ?getType@uiNonVisualWidget@@UAEPBDXZ ?getType@uiParticleSystem@@UAEPBDXZ ?getType@uiProgressBar@@UAEPBDXZ ?getType@uiRadioButton@@UAEPBDXZ ?getType@uiRadioGroup@@UAEPBDXZ ?getType@uiSliderButton@@UAEPBDXZ ?getType@uiSprite@@UAEPBDXZ ?getType@uiTextWidget@@UAEPBDXZ ?getType@uiToggleButton@@UAEPBDXZ ?getType@uiVisualWidget@@UAEPBDXZ ?getTypeId@uiWidget@@SAHPBD@Z ?getUserValue@uiDialog@@QBEHXZ ?getValue@uiRadioButton@@QBEHXZ ?getValue@uiRadioGroup@@QBEHXZ ?getValue@uiSliderButton@@QBEMXZ ?getVisible@uiWidget@@UBE_NXZ ?getWidget@uiBackgroundLoader@@QAEPAVuiWidget@@PAV2@@Z ?getWidget@uiWidget@@QAEPAV1@PBDH@Z ?getWidgetFlags@uiWidget@@QBEIXZ ?getWidth@uiEntryWidget@@UBEHXZ ?getWidth@uiTextWidget@@MBEHXZ ?getWidth@uiWidget@@UBEHXZ ?gfxStatistics@uiSubsystem@@QAEX_NPBD@Z ?hide@uiDialog@@UAEXXZ ?idle@uiDialog@@UAEXXZ ?initialize@uiSubsystem@@QAEHPAVPreferences@@@Z ?initialize@uiWidget@@UAEXXZ ?inputEvent@uiSubsystem@@QAEXW4e_uiEvent@@HHH@Z ?inputEvent@uiWidget@@UAE_NW4e_uiEvent@@HHH_N1@Z ?inputFocusCb@uiWidget@@QAEXP6A_NPAV1@PAX@Z1@Z ?isAccepted@uiEntryWidget@@UBE_NXZ ?isDialogPushed@uiSubsystem@@QAE_NPAVuiDialog@@@Z ?isEmpty@uiDigitalBanner@@QAE_NXZ ?isFull@uiProgressBar@@QBE_NXZ ?isHovering@uiButton@@QBE_NXZ ?isSelected@uiRadioButton@@QBE_NXZ ?isType@uiButton@@UAE_NPBD@Z ?isType@uiDialog@@UAE_NPBD@Z ?isType@uiDigitalBanner@@UAE_NPBD@Z ?isType@uiEntryWidget@@UAE_NPBD@Z ?isType@uiFlowLayout@@UAE_NPBD@Z ?isType@uiGameContainer@@UAE_NPBD@Z ?isType@uiNonVisualWidget@@UAE_NPBD@Z ?isType@uiParticleSystem@@UAE_NPBD@Z ?isType@uiProgressBar@@UAE_NPBD@Z ?isType@uiRadioButton@@UAE_NPBD@Z ?isType@uiRadioGroup@@UAE_NPBD@Z ?isType@uiSliderButton@@UAE_NPBD@Z ?isType@uiSprite@@UAE_NPBD@Z ?isType@uiTextWidget@@UAE_NPBD@Z ?isType@uiToggleButton@@UAE_NPBD@Z ?isType@uiVisualWidget@@UAE_NPBD@Z ?isType@uiWidget@@UAE_NPBD@Z ?loadPsys@uiParticleSystem@@QAEXPBD@Z ?loadUI@uiSubsystem@@QAEPAVuiWidget@@PBD@Z ?loadUI@uiWidget@@SAPAV1@PBDPAV1@@Z ?loadWidget@uiBackgroundLoader@@QAEXPBD@Z ?loop@uiSprite@@QAEX_N@Z ?overrideActive@uiWidget@@UAEX_N@Z ?overrideInputFocus@uiWidget@@UAEX_N@Z ?overrideVisible@uiWidget@@UAEX_N@Z ?parse@uiWidget@@QAEXPAVParser@@_N@Z ?parseObjHeader@uiWidget@@SAPAV1@PAVParser@@PAV1@@Z ?popDialog@uiSubsystem@@QAEXPAVuiDialog@@_N@Z ?popInputFocusWidget@uiSubsystem@@QAEXXZ ?print@uiDigitalBanner@@QAAXPBDZZ ?print@uiDigitalBanner@@UAAXIPBDZZ ?print@uiTextWidget@@QAAXHPBDZZ ?pushDialog@uiSubsystem@@QAEXPAVuiDialog@@_N@Z ?pushInputFocusWidget@uiSubsystem@@QAEXPAVuiWidget@@@Z ?registerProgCb@uiWidget@@SAXP6AXPAV1@PAXW4e_uiProgressEvent@@@Z1@Z ?releaseInstance@uiParticleSystem@@QAEXXZ ?releaseSprite@uiVisualWidget@@UAEXXZ ?render@uiSubsystem@@QAEHI@Z ?render@uiWidget@@UAEXHH@Z ?reportDialogStack@uiSubsystem@@QAEXXZ ?reset@uiDialog@@UAEXXZ ?reset@uiEntryWidget@@UAEXXZ ?reset@uiParticleSystem@@QAEXXZ ?reset@uiSprite@@QAEX_NHI@Z ?resetPsys@uiButton@@QAEXXZ ?resetTabFocus@uiDialog@@QAEXXZ ?s_allocator@uiButton@@SAPAVuiWidget@@XZ ?s_allocator@uiDialog@@SAPAVuiWidget@@XZ ?s_allocator@uiDigitalBanner@@SAPAVuiWidget@@XZ ?s_allocator@uiEntryWidget@@SAPAVuiWidget@@XZ ?s_allocator@uiFlowLayout@@SAPAVuiWidget@@XZ ?s_allocator@uiGameContainer@@SAPAVuiWidget@@XZ ?s_allocator@uiNonVisualWidget@@SAPAVuiWidget@@XZ ?s_allocator@uiParticleSystem@@SAPAVuiWidget@@XZ ?s_allocator@uiProgressBar@@SAPAVuiWidget@@XZ ?s_allocator@uiRadioButton@@SAPAVuiWidget@@XZ ?s_allocator@uiRadioGroup@@SAPAVuiWidget@@XZ ?s_allocator@uiSliderButton@@SAPAVuiWidget@@XZ ?s_allocator@uiSprite@@SAPAVuiWidget@@XZ ?s_allocator@uiTextWidget@@SAPAVuiWidget@@XZ ?s_allocator@uiToggleButton@@SAPAVuiWidget@@XZ ?s_allocator@uiVisualWidget@@SAPAVuiWidget@@XZ ?s_clickDefault@uiButton@@1PBDB ?s_dynamicLoading@uiWidget@@2_NA ?s_fDeltaTime@uiWidget@@2MA ?s_freeScripletCache@uiWidget@@SAXXZ ?s_getDepthName@uiWidget@@SAPBDI@Z ?s_getDepthValue@uiWidget@@SAHPBD@Z ?s_highlightDefault@uiButton@@1PBDB ?s_iDeltaTime@uiWidget@@2IA ?s_registerWidget@uiSubsystem@@SAXPBDP6APAVuiWidget@@XZ@Z ?s_scriptletCacheCount@uiWidget@@1IA ?s_scriptletCacheHead@uiWidget@@1PAU_ScriptletCache_s@@A ?s_scriptletCacheTail@uiWidget@@1PAU_ScriptletCache_s@@A ?s_terminate@uiWidget@@2_NA ?select@uiRadioButton@@QAEX_N@Z ?setActive@uiFlowLayout@@UAEX_N0@Z ?setActive@uiWidget@@UAEX_N0@Z ?setActive@uiWidget@@UBE_NXZ ?setActiveWidget@uiSubsystem@@QAEXPAVuiWidget@@@Z ?setAlpha@uiGameContainer@@UAEXEII_N@Z ?setAlpha@uiParticleSystem@@UAEXEII_N@Z ?setAlpha@uiTextWidget@@UAEXEII_N@Z ?setAlpha@uiVisualWidget@@UAEXEII_N@Z ?setAlpha@uiWidget@@UAEXEII_N@Z ?setAnim@uiSprite@@QAEXH_N0I@Z ?setAnim@uiVisualWidget@@UAEXH@Z ?setClickSound@uiButton@@QAEXPBD@Z ?setCursor@uiEntryWidget@@UAE_NPBD@Z ?setCustomCursor@uiSubsystem@@QAEXPAVuiWidget@@@Z ?setDefaultSounds@uiButton@@SAXPBD0@Z ?setDepth@uiWidget@@QAEXI@Z ?setDepth@uiWidget@@QAEXPBD@Z ?setFlowType@uiFlowLayout@@QAEXW4flowType_e@1@@Z ?setFont@uiDigitalBanner@@QAE_NPBD@Z ?setFont@uiTextWidget@@UAE_NPBD@Z ?setFrame@uiVisualWidget@@UAEXH@Z ?setHeight@uiWidget@@UAEXH@Z ?setHighlightSound@uiButton@@QAEXPBD@Z ?setInputFocus@uiWidget@@UAEX_N0@Z ?setInputFocusWidget@uiSubsystem@@QAEXPAVuiWidget@@@Z ?setJustify@uiTextWidget@@UAEXI@Z ?setParticleSystem@uiButton@@QAEXPBD@Z ?setPause@uiDigitalBanner@@QAEX_N@Z ?setPaused@uiGameContainer@@QAEX_N@Z ?setRange@uiProgressBar@@QAEXHH@Z ?setSprite2@uiToggleButton@@UAE_NPBD@Z ?setSprite@uiVisualWidget@@UAE_NPBDHH_N@Z ?setStep@uiProgressBar@@QAEXH@Z ?setTimeScale@uiDigitalBanner@@QAEXM@Z ?setToggle@uiToggleButton@@UAEX_N@Z ?setTopLevelWidget@uiSubsystem@@QAEXPAVuiWidget@@@Z ?setUserValue@uiDialog@@QAEXH@Z ?setValue@uiProgressBar@@UAEXH_N@Z ?setValue@uiRadioButton@@QAEXH@Z ?setValue@uiRadioGroup@@QAEXH@Z ?setValue@uiSliderButton@@QAEXM@Z ?setVisible@uiWidget@@UAEX_N0@Z ?setVisibleWidget@uiSubsystem@@QAEXPAVuiWidget@@@Z ?setWidgetFlags@uiWidget@@QAEXI@Z ?setWidgetStates@uiWidget@@QAEX_N000@Z ?setWidth@uiWidget@@UAEXH@Z ?shiftKeyDown@uiSubsystem@@QBE_NXZ ?shutdown@uiSubsystem@@QAEHXZ ?step@uiProgressBar@@QAEXXZ ?stop@uiParticleSystem@@QAEXXZ ?terminate@uiBackgroundLoader@@QAEXXZ ?testBounds@uiButton@@UAE_NHH@Z ?testBounds@uiEntryWidget@@UAE_NHH@Z ?testBounds@uiVisualWidget@@UAE_NHH@Z ?testBounds@uiWidget@@UAE_NHH@Z ?toggle@uiToggleButton@@UAEXXZ ?topDialog@uiSubsystem@@QAEPAVuiDialog@@XZ ?topDialogIsIdle@uiSubsystem@@QAE_NPAVuiDialog@@@Z ?trace@uiSubsystem@@QAEPAU_uiTrace_s@@HHHPBD@Z ?trace@uiWidget@@UAEPAU_uiTrace_s@@HHHPBD@Z ?update@uiGameContainer@@UAEXHH@Z ?update@uiSubsystem@@QAEHI@Z ?update@uiWidget@@UAEXHH@Z ?updateLock@uiSubsystem@@QAEX_N@Z

Sharing

General

Malware Config

Signatures

File Explorer

LuxorCollection_Setup.exe

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic

$PLUGINSDIR/InstallOptions.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/ioSpecial.ini

$PLUGINSDIR/modern-header.bmp

$PLUGINSDIR/modern-wizard.bmp

EULA.txt

Luxor AR.exe

user32

core

file

ui2

snd3d

gfx2d

logger

msvcrt

kernel32

crash

dsetup

generic

Luxor.exe

user32

core

file

ui2

snd3d

gfx2d

logger

msvcrt

kernel32

crash

dsetup

generic

Read_Me.htm

assets/MJ.ico

assets/Thumbs.db

assets/button_moregames.jpg

assets/button_moregames.spr

assets/splashscreen.jpg

core.dll

gdi32

user32

winmm

shell32

version

file

logger

msvcrt

kernel32

generic

crash.dll

dsetup

core

user32